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Abstract. Recently, several approaches to updating knowledge bases modeled 
as extended logic programs have been introduced, ranging from basic methods to 
incorporate (sequences of) sets of rules into a logic program, to more elaborate 
methods which use an update policy for specifying how updates must be incor- 
porated. In this paper, we introduce a framework for reasoning about evolving 
knowledge bases, which are represented as extended logic programs and main- 
tained by an update policy. We first describe a formal model which captures vari- 
ous update approaches, and we define a logical language for expressing properties 
of evolving knowledge bases. We then investigate semantical and computational 
properties of our framework, where we focus on properties of knowledge states 
with respect to the canonical reasoning task of whether a given formula holds 
on a given evolving knowledge base. In particular, we present finitary character- 
izations of the evolution for certain classes of framework instances, which can 
be exploited for obtaining decidability results. In more detail, we characterize 
the complexity of reasoning for some meaningful classes of evolving knowledge 
bases, ranging from polynomial to double exponential space complexity. 
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1 Introduction 

Updating knowledge bases is an important issue in the area of data and knowledge rep- 
resentation. While this issue has been studied extensively in the context of classical 
knowledge bases (cf., e.g., [31, 19]), attention to it in the area of nonmonotonic knowl- 
edge bases, in particular in logic programming, is more recent. Various approaches to 
evaluating logic programs in the light of new information have been presented. The 
proposals range from basic methods to incorporate an update U, given by a set of rules, 
or a sequence of such updates Ui, . . . ,Un, into a (nonmonotonic) logic program P [2, 
34,21, 13], to more general methods which use an update policy to specify, by means 
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of update actions, how the updates C/i, . . . , /7„ should be incorporated into the current 
state of knowledge [28, 3, 15]. Using these approaches, queries to the knowledge base, 
like "is a fact / true in P after updates Ui,. . . , UnT', can then be evaluated. 

Notably, the formulation of such queries is treated on an ad hoc basis, and more 
involved queries such as "is a fact / true in P after updates Ui,. . . ,Un and possi- 
bly further updates?" are not considered. More generally, reasoning about an evolving 
knowledge base KB, maintained using an update pohcy, is not formally addressed. 
However, it is desirable to know about properties of the contents of the evolving knowl- 
edge base, which also can be made part of a specification for an update poUcy. For 
example, it may be important to know that a fact a is always true in KB, or that a fact b 
is never true in KB. Analogous issues, called maintenance and avoidance, have recentiy 
been studied in the agent community [33]. Other properties may involve more complex 
temporal relationships, which relate the truth of facts in the knowledge base over time. 
A simple example of this sort is the property that whenever the fact message_to{tom), 
which intuitively means that a message should be sent to Tom, is true in KB at some 
point, then the fact sent-message-to{tom), representing that a message has been sent 
to Tom, will be true in the evolving knowledge base at some point in the future. 

Main problems addressed. In this paper, we aim at a framework for expressing rea- 
soning problems over evolving knowledge bases, which are modeled as extended logic 
programs [20] and may be maintained by an update pohcy as mentioned above. In par- 
ticular, we are interested in a logical language for expressing properties of the evolving 
knowledge base, whose sentences can be evaluated using a clear-cut formal seman- 
tics. The framework should, on the one hand, be general enough to capture different 
approaches to incorporating updates Ui, . . . ,Un into a logic program P and, on the 
other hand, pay attention to the specific nature of the problem. Furthermore, it should 
be possible to evaluate a formula, which specifies a desired evolution behavior, across 
different reaUzations of update policies based on different definitions. 

Main results. The main contributions and results of this paper are summarized as fol- 
lows. 

(1) We introduce a formal model in which various approaches for updating extended 
logic programs can be expressed. In particular, we introduce the concept of an evolution 
frame, which is a structure EF = {A, £C, AC, U, p, Bel) whose components serve to 
describe the evolution of knowledge states of an agent associated with the knowledge 
base. This structure comprises 

- a logic programming semantics, Bel, for extended logic programs P, resp. se- 
quences (Pi, P2, . . . , Pm) of extended logic programs Pi, over an alphabet A; 

- a nonempty class of events, which are sets of rules communicated to the agent; and 

- an update frame {AC, U, p), consisting of a set of update actions AC, an update 
pohcy n, and a realization assignment p, which together specify how to incorpo- 
rate events, which are sets of rules drawn from a class of possible events £C and 
communicated to the agent, into the knowledge base. 

In our framework, a knowledge state s = {KB: Ei, . . . , En) of the agent consists of 
an initial knowledge base KB, given by an extended logic program over the alphabet 
A, and a sequence of events Ei, . . . ,En. Associated with the knowledge state s is the 
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belief set Bel{s) of the agent, which comprises all formulas which the agent beliefs to 
hold given its state of knowledge. 

The agent reacts on an event by adapting its belief state through the update poUcy 77, 
which singles out update actions A C AC from a set of possible update actions AC 
for application. These update actions are executed, at a physical level, by compilation, 
using the realization assignment p, into a single logic program P, resp. a sequence of 
logic programs (Po, • ■ • , Pn), denoted comp^p^s). The belief set Bel{s) is then given 
by the belief set of the compiled knowledge state, and is obtained by applying the belief 
operator Bel{-) for (sequences of) logics programs to comppp{s). Suitable choices of 
EF allow one to model different settings of logic program updates, such as [2, 28, 21, 
13]. 

(2) We define the syntax and, based on evolution frames, the semantics of a logical 
language for reasoning about evolving knowledge bases, which employs hnear and 
branching-time operators famiUar from Computational Tree Logic (CTL) [17]. Using 
this language, properties of an evolving knowledge base can be formally stated and 
evaluated in a systematic fashion, rather than ad hoc. For example, the maintenance 
problem from above can be expressed by a formula AG a, and the avoidance problem 
by a formula AG^b; the property about Tom's messages is expressed by 

kQ{message-to{tom) AFsent-message-to{tom)). 

(3) We investigate semantical properties of knowledge states for reasoning. Since in 
principle a knowledge base may evolve forever, we are in particular concerned with 
obtaining finitary characterizations of evolution. To this end, we introduce various no- 
tions of equivalence between knowledge states, and show several filtration results: un- 
der certain properties of the components of EF, evolution of a knowledge state s in an 
evolution frame EF can be described by a finite transition graph G*{s, EF), which is 
a subgraph bisimilar to the whole natural transition graph G{s, EF) over knowledge 
states that includes an arc from Si = {KB, Ei,. . . , En) to every immediate succes- 
sor state S2 = {KB, Ei, . . . ,En, En+i). In some cases, G*{s, EF) is constructible by 
exploiting locality properties of the beUef operator Bel{-) and increasing compilations 
compp;p{-), while in others it results by canonization of the knowledge states. 

In a concrete case study, we establish this for evolution frames which model policies in 
the EPI framework for logic program updates using the answer set semantics [15], as 
well as for the LUPS [3,4] and LUPS* policies [24] under the dynamic stable model 
semantics [ 1 , 2] . Similar results apply to updates under other semantics in the Uterature. 

(4) We derive complexity results for reasoning. Namely, we analyze the problem of 
deciding, given an evolution frame EF, a knowledge state s, and a formula (p, whether 
EF, s \= holds. While this problem is undecidable in general, we single out sev- 
eral cases in which the problem is decidable, adopting some general assumptions about 
the underlying evolution frame. In this way, we identify meaningful conditions under 
which the problem ranges from PSPACE up to 2-EXPSPACE complexity. We then ap- 
ply this to the EPI framework under the answer set semantics [15, 16], and show that 
its propositional fragment has PSPACE-complexity. Similar results might be derived for 
the LUPS and LUPS* frameworks. We also consider the complexity of sequences of ex- 
tended logic programs (ELPs) and generalized logic programs (GLPs), respectively. We 
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show that deciding whether two sequences P = {Pq, . . . ,Pn) and Q = {Qo, . . . , Qm) 
of prepositional ELPs are strongly equivalent under the update answer set semantics, 
i.e., whether for every sequence/? = {Rq, . . . , Rk), k >0, the concatenated sequences 
P + R and Q+R have the same beUef sets, is coNP-complete. This result is not imme- 
diate, since potentially infinitely many pairs P + R and Q+R need to be checked. Thus, 
testing strong equivalence between sequences of ELPs is not more expensive than stan- 
dard inference of a literal from all answer sets of an EL? (cf. [12]). Analogous results 
hold for sequences of GLPs. 

To the best of our knowledge, no similar effort to formally express reasoning about 
evolving nonmonotonic knowledge bases at a level as considered here has been put 
forth so far. By expressing various approaches in our framework, we obtain a formal se- 
mantics for reasoning problems in them. Furthermore, results about properties of these 
approaches (e.g., complexity results) may be concluded from the formalism by this em- 
bedding, as we illustrate for the EPI framework. Note that J. Leite, in his recent Ph.D. 
thesis [25], considers properties of evolving logic programs in a language inspired by 
our EPI language [15, 16], and derives some properties for dynamic logic programs 
similar to properties for update programs derived in Section 7. 

The rest of this paper is structured as follows. In the next section, we give some basic 
definitions and fix notation. In Section 3, we introduce our notion of an evolution frame, 
which is the basic setting for describing update formahsms, and in Section 4, we show 
how different approaches to updating logic programs can be captured by it. In Section 5, 
we then define the syntax and semantics of our logical language for reasoning about 
evolving knowledge bases. Section 6 is devoted to the study of equivalence relations 
over knowledge states, which are useful for filtration of the infinite transition graph that 
arises from an evolving knowledge base. In particular, conditions are investigated under 
which a restriction to a finite subgraph is feasible. After that, we address in Section 7 
the complexity of reasoning. Related work is discussed in Section 8, where we also 
draw some conclusions and outline issues for further research. 

2 Preliminaries 

We consider knowledge bases represented as extended logic programs (ELPs) [20], 
which are finite sets of rules built over a first-order alphabet A using default negation 
not and strong negation A rule has the form 

r: Lo ^ Li, . . . ,Lm,not Lm+i, ■ ■ ■ ,not Ln, (1) 

where each Li is a literal of form A or ^A, where A is an atom over A. For a literal 
L, the complementary literal, -^L, is -^A if L = A, and Aif L = -lA, for some atom 
A. For a set S of literals, we define -^S = {^L \ L G S}. We also denote by LHa 
the set A U -^A of all hterals over A. The set of all rules is denoted by Ca- We call 
Z/Q the head of r (denoted by H{r)), and the set {Li, . . . , Lm, not L^+i, • • • , not Ln} 
the body of r (denoted by B(r)). We define i3+(r) = {Li, . . . , L„i} and B~{r) = 
{Lm+i, . . . , Ln}. We allow the case where Lq is absent from r, providing B{r) ^ 0; 
such a rule r is called a constraint. If H{r) = {Lq} and B{r) = 0, then r is called 
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fact. We often write Lq for a fact r = Lq • Further extensions, e.g., not in the rule 
head [2], might be added to fit other frameworks. 

An update program, P, is a sequence {Pq, . . . ,Pn) of ELPs (n > 0), representing 
the evolution of program Pg in the light of new rules Pi, . . . , P„. We sometimes use 
UP to denote the set of all rules occurring in P, i.e., UP — lj"=i Pi- The semantics of 
update programs can abstractly be described in terms of a beUef operator Bel{-), which 
associates with every sequence P a set Bel{P) C £^ of rules, intuitively viewed as the 
consequences of P. Bel{-) may be instantiated in terms of various proposals for update 
semantics, like, e.g., the approaches described in [2, 34, 21, 13, 28]. 

2.1 Update answer sets 

For concrete examples, we consider the answer set semantics for propositional update 
programs as introduced in [13, 14], as well as the semantics for dynamic logic pro- 
grams as defined in [2, 25]. The former semantics defines answer sets of a sequence of 
ELPs, P = (Pq, . . . , P„), in terms of answers sets of a single ELF P as follows. An 
interpretation, S, is a set of classical Uterals containing no opposite Uterals A and -^A. 
The rejection set, Rej{S,P), of P with respect to an interpretation S is Rej{S,P) = 
U-Lo^eji(S',P), where Rej„{S,P) = 0, and, for n > i > 0, Reji{S,P) contains 
every rule r G Pi such that H{r') = -^H{r) and S |= S(r) U S(r'), for some 
r' € Pj \ Rejj{S,P) with j > i. That is, Rej{S,P) contains the rules in P which 
are rejected by unrejected rules from later updates. Then, an interpretation S is an an- 
swer set of P = (Po, . . . , P„) iff 5 is a consistent answer set [20] of the program 
P = [Ji Pi \ Rcj{S,P), i.e., 5 is a minimal consistent set of literals closed under the 
rules of the reduct P^ = {H{r) ^ B+{r) | r G P and P" (r) n 5 = 0}. The set of 
all answer sets of P is denoted by U{P). This definition properly generalizes consistent 
answer sets from single ELPs to sequences of ELPs. Nevertheless, we use AS{P) to 
denote the set of all answer sets of a single ELP P. Moreover, an ELP P is called in- 
consistent if it has no consistent answer set, i.e., AS{P) = 0. Update answer sets for 
arbitrary (non-ground) update programs P are defined in terms of its ground instance 
similar as answer sets for ELPs [20]. 

Example 1. Let Pq = {6 not a, a <— }, P\ = {->« c ^}, and Pj = {^c ^}. 
Then, Pq has the single answer set Sq = {a} with Rej{So,Po) = 0; (Po,Pi) has 
answer set 5*1 = {^a, c, b} with Rej{Si, (Pq, Pi)) = {a <—}; and (Pq, Pi, P2) has 
the unique answer set 5*2 = {^a, -ic, b} with Rej{S2, (Pq, Pi, P2)) = {c <—,a <—}. 

The belief operator Belsi-) in the framework of [13] is given by BelE{P) — {r G 
£a I 5* t= r for all 5* G U{P)}, where S \= r means that for each ground instance r' of 
r, either H{r') G S,ot L^S for some L G B{r'), or Lg S for some not L G B{r'). 

2.2 Dynamic answer sets 

By the term dynamic answer sets we refer to the extension of dynamic stable models, 
defined for sequences of generalized logic programs (GLPs) by Alferes et al. [2], to 
the three- valued case. In GLPs, default negation may appear in the head of rules, but 
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strong negation is excluded. The definition of dynamic stable models uses a slightly 
non-standard concept of stable models, where weakly negated literals not A (A some 
atom) are treated like ordinary propositional atoms, and rules Aq <— Ai,. . . , A^, 
notAjn+i, ■ ■ ■ , not An are viewed as Horn clauses. Accordingly, an interpretation I 
is in this context understood as a set of atoms and weakly negated atoms such that 
vl G J iff not A ^ I holds for each atom A. To distinguish it from a usual interpre- 
tation, we call it a generalized interpretation. As usual, a set B, comprising atoms and 
weakly negated atoms, is true in a generalized interpretation /, symboUcaUy 7 ^ B, iff 
B C I. Towards defining stable models, the following notation is required: 

Let, for a set of atoms A, not A stand for the set {not A \ A e A}. Further- 
more, for M C U not A, we set = {not A \ not A (E M}, and, for Z G 
A U not A, we define not Z = not A if Z = A and not Z = A if Z = not A. 
For a program P over A, the deductive closure, Cn^(P), is given by the set {L \ 
L G AU not A and P \- L}, where P is interpreted as a propositional Horn theory and 
"h" denotes classical derivabihty. A generahzed interpretation S* is a stable model of a 
program P iff 5 = Cnx(P U S~). 

Let P = {Pq, . . . ,Pn) be a sequence of GLPs over A, and let / be a generahzed 
interpretation. Alferes et al. [2] introduce the following concepts: 

Rejected{I,P) = \J"^Q{r G Pi \ 3r' e P, , for some j e {i + 1, . . . , n}, such 

that H{r') = not H{r) and / \= B{r) U B{r')}; 
Defaults{I,P) = {not A | in P such that if (r) =AandI \= B{r)}. 

A set 5 C ^ U not Aisa dynamic stable model of P iff 

S = Cn{{\JP \ Rejected{S,P)) U Defaults{S,P)). 

We remark that Alferes et al. defined dynamic stable models of P as projections S = 
S" n U not A) of the stable models of a single GLP, P^, resulting from a transfor- 
mation (for a detailed definition cf. [2]), and then proved the above characterization as 
a result. 

Alferes et al. [2] defined also an extension of their semantics to the three-valued 
case: LetP = (Pq, . . . , P„) be a sequence of ELPs over A. Then, a consistent set S C 
LitJ^ is a dynamic answer set of Piff SU {not L \ L & Litjy \ 5} is a dynamic stable 
model of the sequence P = (Pq , . . . , P„ U { noi A -.A, not -^A ■>— A \ A & A}) of 
GLPs. Here, the rules in {not A ^ -^A, not -^A <— A \ A € A} serve for emulating 
classical negation through weak negation. 

Example 2. Let, as in the previous example, Po — {b <— not a, a ^}, Pi = {-la 
c <— }, and P2 = {-ic <— } over A = {a, b, a}. Then, Pq has the single dynamic an- 
swer set So = {a, not b, not c}, where Rejected{SQ, Pq) = and Defaults{So, Po) = 
{not b, note}; the sequence (Po,Pi) has the dynamic answer set S'l = {^a,c,b}, 
whcTC Rejected{Si,{Po,Pi)) = {a ^} and Def aults {Si, {Pq, Pi)) = {not^b, 
not^c}; and (Pq, Pi, P2) has the single dynamic answer set ^2 = {-la, -ic, 6}, 
where Rejected{S2, (Po, Pi, P2)) = { a ^ , c ^ } and Defaults{S2, (Po, -Pi, -P2)) = 
{not -16}. Note that in these simple examples, update answer sets and dynamic answer 
sets coincide, which is not the case in general [14]. 
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Similarly to the belief operator BelE{-), we can define a belief operator Bel^l-) 
for dynamic stable models as Bel^{P) = {r € La | 5' ^ r for all S g 'D{P)}, where 
!D(P) denotes the set of all dynamic stable models of P. 

Finally, we remark that while we defined answer sets and belief sets for sequences 
of finite programs, they can be defined for sequences of possibly infinite programs in 
an analogous way. 

3 Knowledge-Base Evolution 

We assume that the agent has an initial knowledge base, KB, in form of an extended 
logic program, and a background update policy, 11, describing the update behavior of 
the agent, i.e., how it has to react when it receives new information from the envi- 
ronment. Information arrives to the agent in form of a sequence of events, each event 
being a finite set of rules from a given event class. The update pohcy specifies what 
rules or facts have to be incorporated into or retracted from the knowledge base, de- 
pending on the content of the event and on the belief set of the agent. The evolution of 
the agent's knowledge state is thus completely described when KB and a sequence of 
events i^i , . . . , are given, provided an update policy iJ is specified. 

3.1 Events and knowledge states 

We start with the basic formal notions of an event and of the knowledge state of an agent 
maintaining a knowledge base. 

Definition 1. Let A be some alphabet. An event class over A {or simply event class, 
if no ambiguity arises) is a collection £C C 2^-^ of finite sets of rules. The members 
E € £C are called events. 

Informally, £C describes the possible events (i.e., sets of communicated rules) an 
agent may experience. In the most general case, an event is an arbitrary ELP; a plain 
case is that an event just consists of a set of facts, which are formed over a subset of the 
alphabet. In a deductive database setting, the latter case corresponds to an extensional 
database that is undergoing change while the intensional part of the database remains 
fixed. 

Definition 2. Let £C an event class over some alphabet A A knowledge state over £C 

{simply, a knowledge state) is a tuple s = {KB; Ei, . . . , En), where KB C is an 
ELP {called initial knowledge base) and each Ei {1 < i <n) is an event from £C. The 
length of s, denoted \s\, is n. The set of all knowledge states over A given £C is denoted 
by KS{£C). 

Intuitively, s = {KB; Ei,. . . , En) captures the agent's knowledge, starting from 
its initial knowledge base. When a new event En+i occurs, the current knowledge state 
s changes to s' = {KB; Ei, . . . , En, En+i), and the agent should adapt its belief set in 
accordance with the new event obeying its given update policy. 
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3.2 Evolution frame 



The "universe" in which the evolution of an agent's knowledge base takes place is 
given by the concept of an evolution frame, which comprises different components that 
parameterize the update mechanism and the semantics used on the evolving knowledge 
base. This structure comprises, together with an alphabet A, 

- a semantics, Bel{-), for ELPs, resp. sequences of ELPs, over A; 

- a nonempty event class EC over A; and, 

- an update frame {AC^ U, p), consisting of a set of update commands AC, an update 
policy n, and a realization assignment p, which together specify how to incorporate 
events into the knowledge base. 

In more detail, the components of an update frame are as follows. 

Update commands. The update commands (or actions) in AC are names for commands 
which are supposed to be executed on the knowledge base. Simple, elementary update 
connmands are insert{r) and delete{r), which add and remove a rule to a logic pro- 
gram, respectively, without a sophisticated semantics handhng potential inconsistencies 
(which may be delegated to the underlying update semantics). More involved update 
commands have been proposed in the literature (cf., e.g., [3, 15]). However, several up- 
date frameworks can be modeled using these simple commands. The semantics (i.e., 
effects) of update actions are given by the realization assignment, p, which is described 
below. 

Update policy. The update policy 77, which is a function mapping every pair {s,E) 
of a knowledge state s over £C (i.e., s S KS{£C)) and an event E € EC into a set 
n{s, E) C AC of update commands, determines which actions should be executed. 
Update poUcies allow for specifying sensible and flexible ways to react upon incoming 
events. A very simple policy is Tims (s, E) = {insert{r) \ r € E}; it models an agent 
which incorporates the new information unconditionally. More sophisticated poUcies 
may define exceptions for the incorporation of rules from events, or the insertion of 
rules may be conditioned on the belief in other rules. 

Realization assignment. The realization assignment p assigns to each pair (s, A) of a 
knowledge state s over £C and a set A C AC of update commands a sequence p{s, A) = 
{Po, . ■ . , Pn) of ELPs Pi over A {0 < i < n). It associates in this way a meaning with 
the set of actions A which must be executed on the knowledge state s, in terms of an 
ELP, resp. a sequence of ELPs, and "realizes" the update in this way. The agent's beliefs 
from the updated knowledge base may then be given by the operator Bel{-) apphed to 
the result of p{s, A) as defined in Section 3.3 below. 

Different possibilities for concrete realization assignments p may be used. A simple 
reaUzation assigrmient, p±{s, A), which works for sets A of actions of form insert{r) 
and delete{r), and assumes that each knowledge state s is assigned with an ordinary 
ELP P{s), is given by 

p±{s, A) - {P{s) U {r I insert{r) e A}) \ {r \ delete{r) e A}, 
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i.e., the insertion and deletion commands in A are "physically" implemented, with no 
further enforcement that consistency is preserved, or, as for deletion, that r is actually 
logically deleted from the knowledge base. Its restriction to insertion commands is the 
reaUzation assignment pins = {s,A) = P{s) U {r \ insert{r) € A}, which may be 
used in contexts where data are not physically removed, for whatever reasons. 

More sophisticated reaUzation assignments might block, at the logical level, the ap- 
plicabihty of rules in the knowledge base, by using a sequence (Pq, . . . , P„) of ELPs 
as a representation, and aim at enforcing consistency of the knowledge base. For in- 
stance, in the dynamic logic programming semantics of sequences of ELPs in [2, 15], 
more recent rules occur later in a sequence and override rules from programs which 
occur earher in the sequence; this mechanism is also used in the EPI framework for 
incorporating changes to the knowledge base at the logical level [15, 16]. 

In summary, we formally define an evolution frame as follows. Let, for any alphabet 
A denote ELP*{A) the set of all sequences P = (Pq, • • • , Pn), n > 0, of ELPs Pi 
over A. 

Definition 3. An evolution frame is a tuple EF = {A, £C, AC, 11, p, Bel), where 

- A is a finite (first-order) alphabet; 

- £C is a nonempty event class over A; 

— AC is a set of update commands (or actions); 

— n : KS{£C) X £C — > 2-^^ is an update policy; 

— p : KS{£C) X 2-^'' ELP*{ A) is a realization assignment; and 

- Bel : ELP*{A) — > 2^-^ is a belief operator for sequences of ELPs. 

The set of all knowledge states in EF, denoted by Sef, is given by KS{£C). 

The concept of an evolution frame allows us to model various update approaches, 
as we discuss below in Section 4. 

3.3 Compilation and belief set 

While n determines what to do, the reaUzation assignment p states how this should be 
done. Informally, p{s. A) "executes" actions A on the knowledge state s by producing 
a logic program P or, in general, a sequence of logic programs P. We can use p to 
"compile" a knowledge state s into a (sequence of) logic programs, by determining the 
set of actions A from the last event in s. We introduce the following notation. 

For any knowledge state .s = {KB;Ei, . . . ,En) over £C, denote by 7ri(s) = 
{KB; El,. . . , Ei) its projection to the first i events, for < i < n. In particular, 7ro(s) 
is the initial knowledge base KB. We call 7rj(s) a previous knowledge state (or simply 
an ancestor) of s if i < n. Dually, a knowledge state ,s' over £C is a future knowl- 
edge state (or simply a descendant) of s if s is previous to s'. Furthermore, 7r„_i(s) 
is the predecessor of s, and s' is a successor of s, if s is predecessor of s'. Finally, for 
events E[, . . . , P'„, we write s + E[, . . . , P'„ to denote the concatenated knowledge 
state {KB; Ei, . . . , En, E[, . . . , E'^); a similar notation is used for the concatenation 
of sequences of logic programs. 
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Definition 4. Let EF = {A, EC, AC, 71, p, Bel) be an evolution frame. For any knowl- 
edge state s = {KB; Ei,...,En) over £C, the compilation associated with s is 

camp (s) = /^("'^)' if\s\=Q,i.e.,s={KB), 
\p{nn-i{s),n{wn-i{s), En)), otherwise. 

Note that com,p^p{-) is a function which is fully detemained by EF; we often write 
comp{-) instead of compEp{-) if EF is understood. 

This definition of compilation is fairly general. It first computes the actions for 
the latest event En, and then requires that these actions are executed on the predecessor 
state. Observe that, in view of comp^p (s), we could equally well model update policies 
as unary functions iT(-) such that i7(s) = i7(7r„-i(s),-B„). However, we chose binary 
update policies to stress the importance of the last event in s. Furthermore, 77 may be 
restricted in the compilation process, e.g., such that only the belief set 7?e^(7r„_i(s)) 
of the predecessor state is considered rather than the whole state itself; this will be 
considered in Section 6.2. 



Incremental Compilation. An important class of compilations are those in which, for a 
future knowledge state s' , comp{s') results by appending some further elements to the 
sequence comp{s) of logic programs for the current knowledge state s. This motivates 
the following notion: 

Definitions. Given an evolution frame EF = {A, £C, AC, It, p, Bel), comppp{-) is 
incremental iff, for each s = {KB; Ei, . . . , En), comppp{s) = {Pq, ■ ■ ■ , Pn) such that 
p{{KB),9) ^ Poand p{n,_i{s),n{Tr,_i{s),E,)) = (Pq, . . . , Pi) for 1 < i < n. 

This definition amounts to the expected behavior: 

Proposition 1. The mapping comppp{-) is incremental iff, for each knowledge state s, 
comppp{s) = Q if\s\ = 0, and comppp{s) = comp pp{-K^g\_i{s)) + Q' otherwise, 
where Q, Q' are logic programs and "+ " is the concatenation of sequences. 

Proof. The proof proceeds by straightforward induction on | s | . □ 

Example 3. A simple incremental compilation results for ^Ci„s = {msert(r) | r e 
'Cyt}, 77 = Ilins as defined in Subsection 3.2, and pins such that comp pp{{KB)) = 
KB and comppp{s) = comp pp{nis\-i{s)) + {{r \ insert(r) £ A}), where A = 
■'7i„s(7r|s|_i(s), En), given that s = {KB; Ex, . . . , En). Note that comppp{s) is in 
this setting just the sequence {KB, Ex,. . . , En). 

While incremental compilations are natural, we stress that other compilations are of 
course also highly relevant. In particular, the compilation might perform optimizations 
(cf. Section 6.2), or output only an ordinary logic program. 

We also point out that our notion of incremental compilation should not be confused 
with an iterative compilation; such a compilation would, similar in spirit, consider the 
events E^ in a knowledge state s = {KB, Ei, ... ,En) in their chronological order one 
by one and instantaneously incorporate updates Ai = 7T(7ri_i(.s), Ei) into the result 
compp;p{ni-i{s)) for the previous knowledge state and return a single, ordinary logic 
program as the result. 
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The compilation of a knowledge state into a (sequence of) ELPs is used, via the 
semantics Bel{-) for sequences of ELPs, to ascribe a set of beliefs to the agent in the 
respective knowledge state. More formally, the belief set emerging from a knowledge 
state is as follows. 

Definition 6. Let EF = {A, £C, AC, 11, p, Bel) be an evolution frame and s a knowl- 
edge state. The belief set ofs, denoted Bel{s), is given by Bel{comp Ep{s)). 

This completes the exposition of evolution frames and their semantics. Before we 
consider some examples, let us close this subsection with some remarks. 

Remarks. (1) As mentioned earlier, our definition of an update policy, and similarly of 
a realization assignment, which effectively lead to the notion of a compilation, is very 
general. We may stipulate additional postulates upon them, like the incrementabihty 
property or an iterativity property (which we omit here). Likewise, the concept of a 
semantics Bel{P) for sequences P of ELPs is very abstract, and further axioms and 
conditions could be imposed on it. An example of this is the requirement that Bel{P) 
is characterized by rules of bounded length, and in particular by rules without repeated 
literals; this will be the case in Section 7. 

(2) Our definition does not capture nondeterministic update poUcies, where n{s,E) 
may return one out of several possible sets of update actions. In order to model this, the 
notion of a knowledge state can be extended by taking previous actions into account, 
i.e., a knowledge state s is then of the form {KB, {Ei,Ai), . . . , {En, A^)), where each 
Ei is an event, and Ai is the set of update commands executed at step i. In practice, 
we may assume a suitable selection function a, which chooses one of the possible out- 
comes of n{s,E), and we are back to a deterministic update policy 11^. If the selection 
function a is unknown, we may consider all evolution frames EF„ arising for each a. 

3.4 Examples 

Let us illustrate our framework on two examples, which serve as running examples 
throughout the remainder of the paper. 

Example 4 (Shopping Agent). Consider a shopping agent selecting Web shops in search 
for some specific merchandise. Suppose its knowledge base, KB, contains the rules 

ri : query{S) <— sale{S),up{S),not^query{S); 

r2 : site.queried <— query {S); 

r3 : notify <— not site-queried; 

and a fact ro : date (0) as an initial time stamp. Here, ri expresses that a shop S, which 
has a sale and whose Web site is up, is queried by defavQt, and r2, rs serve to detect that 

no site is queried, which causes 'notify' to be true. 

Assume that an event, E, might consist of one or more of the following items: 

- at most one fact date{t), for some date t; 

- facts up{s) or -iup{s), stating that a shop s is up or down, respectively; 
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- ground rules of form sale{s) <— date{t), stating that shop s has a sale on date t. 

An update policy U may be defined as follows: 

n{s,E) = {insert{a) | a G {up{S),^up{S), date{T)},a € E} U 
{insert{sale{S) ^ date{T)), insert{track[S , T)) \ 

sale{S) ^ date{T) £ E, date{T') £ Bel{s), T > T'} U 
{delete{track{S, T)), delete{sale{S) <- date{T)) \ 

date{T') e E, track{S, T) £ Bel{s), date{T) £ Bel{s), T' ^ T} \J 
{delete{date(T)) \ date(T') £ E, date{T) £ B<d(s), T' / T} }. 

Informally, this update policy incorporates information about future sales, only. The 
information of the sale is removed, when the sale ends (assuming the time stamps in- 
crease). To this end, facts track{S, T) are used to keep track of inserted sale informa- 
tion. Similarly, the current time stamp date{t) is maintained by deleting the old values. 
The realization assignment p might be p± from Subsection 3.2, which always returns 
a single ELP, and for Bel we may take any function which coincides on sequences 
f = Po of length one with the standard answer set semantics for ELPs. Or, we might 
choose a reaUzation assignment which maps s and a set of insert{r) and delete{r) 
commands to a sequence {Pq, . . . , P„) of ELPs, using as Bel the answer set semantics 
for sequences of ELPs as discussed in Subsection 3.2. 

Example 5 (Mail Agent). Consider a more complex mail agent, which has the following 
initial knowledge base KB, whose rules are instantiated over suitable variable domains: 



ri 


type{M , private) 




from{M, torn); 


r2 


type{M , business) 




subject{M , project) ; 


rs 


type{M , other) 




not type{M , private) , not type{M , business), msg{M); 


r-4 


trash{M) 




remove{M), not save{M); 


r-6 


remove{M) 




date{M, T),today{T'),not save{M),T' > {T + 30); 


re 


found{M) 




search{T), type{M, T), not trash{M); 


r? 


success 




found{M); 


rs 


failure 




search{T) , not success. 



The knowledge base allows to express several attributes of a message and determine 
the type of a message based on these attributes (rules r\ and r2). By means of rz, a 
default type is assigned to all messages which are neither private nor hu.sine.s.s. Rule 
r4 implicitly states that a save operation is stronger than a remove one. Note that in this 
way, once a message has been saved, it can never be removed. By means of r^, all those 
messages are removed which have not been saved and are older than thirty days. Rules 
tq, rr and rg are used to look for all messages of a given type, which have not been sent 
to the trash yet, and to signal if at least one such message has been found (success) or 
not (failure). 

Suppose that an event E may consist in this scenario of one or more of the following 
items: 

- at most one fact today{d), for some date d; 

- a fact em,pty_trash, which causes messages in the trash to be eUminated; 

- facts save{m) or remove{m), for mail identifiers m; 

- at most one fact search{t), for some mail type t e {other, business, private}; 
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- zero or more sets of facts from{m, n), subject{m, s), or date{m, d) for mail iden- 
tifier m, name n, subject s, and date d. 

The update policy U may be as follows: 

i7(s, E) = {insert{R) \ R £ E} U {insert{msg{M)) \ from{M, N) £ E} U 

{delete{today{D)) \ today{D') e E,today{D) e Bel{s),D' ^ D}\J 
{delete{a) \ a € {trash{M), msg{M), type{M, T)}, 

emptyjrash G E, trash{M) e Bel{s)} U 
{delete{a) \ a € {from{M, N), subject{M, S), date{M, D)}, 

save{M) ^ Bel{s), msg{M) € Bel{s), remove{M) € E} U 
{delete{a) \ a £ Bel{s), 

a € {search{T),found{T), success, failure, empty J/rash} }. 

This update policy (which does not respect possible conflicts of save and remove) 
intuitively adds all incoming information, plus a fact m,sg{M) for each incoming mail 
to the knowledge base. The current date is maintained by deleting the old date. As well, 
all old information from a previous event, relative to a search or to the trash, is removed. 
If an event contains em.ptyj,rash, then all messages in the trash are eliminated. Like 
in the previous example, the reahzation assignment p may be given by p± from Sub- 
section 3.2, or could map s and A incrementally to a sequence of ELPs using as Bel 
simply the answer set semantics for sequences of ELPs. 

4 Capturing Frameworks for Knowledge Evolution 

To emphasize the generality of our framework, we now discuss how existing frame- 
works for updating nonmonotonic knowledge bases can be captured in terms of evolu- 
tion frames. This is possible at two different levels: 

(1) At an "immediate update" level, frameworks for updating logic programs can be 
considered, where each event is an update program, and the update policy is the (im- 
plicit) way in which update programs and the current knowledge are combined, de- 
pending on the semantics of updates of each approach. For example, the formalisms of 
update programs [13, 14], dynamic logic programs [2], revision programs [27,28], ab- 
ductive theory updates [21], and updates through prioritized logic programs (PLPs) [34] 
fall into this class. 

(2) At a higher level, frameworks can be considered which allow for specifying an 
explicit update policy in some specification language, and which offer a greater flexi- 
bility in the handling of updates. Examples of such frameworks are EPI [15], LUPS and 
LUPS* [3, 4, 24], KABUL [25], and, while not directly given in these terms, WC [22]. 

In what follows, we show how some of the above mentioned frameworks can be 
expressed in evolution frames, which shows the generality of the approach. We start 
capturing the formalisms at the update level introduced in Section 2, i.e., the answer set 
semantics for update programs, represented by Belsi-), the dynamic stable model 
semantics for generalized logic programs, represented by i?e?©(-). For both semantics, 
we also show how they are combined with convenient specification languages to form 
higher level frameworks: BelQ{-) is combined with the language LUPS [3,4], which 
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allows for more flexibility of the update process, permitting to dynamically specify the 
contents of a sequence of updates by means of update commands; and the semantics 
BcIe^-) is employed together with the language EPI [15], which is more expressive 
than LUPS. It allows for update statements to depend on other update statements in 
the same EPI policy, and more complex conditions on both the current belief set and 
the actual event can be specified. Further frameworks and semantics are also discussed 
here, albeit more briefly and stressing only the main characterizations. We repeatedly 
use the particular set AC ins of insert commands, the insert poUcy iTj^g, and the insert 
reaUzations pins and p± from Subsection 3.2. 

4.1 Update Programs and EPI 

Update programs [13, 14] are captured by the following evolution frame: 

EF^ = {A,£Cj,.ACins.nins,Pins,BelE), 

where £C^ is the collection of all ELPs over A, and BelE{-) is the belief operator 
defined in Section 2. The EPI framework [15, 16] corresponds to the evolution frame 

EF Ep\ = {A,£C,ACEP\,nEP\,pEP\,BelE), 

where 

- ^Cepi = {assert(r), retract(r), always(r), cancel(r), ignore(r), 

assert_event(r), retract_event(r), always_event(r) | r € Ca], 
and the commands have the meaning as in [15]; 

- ^?EPi is defined by any set of update statements in the language EPI, which are 
evaluated through a logic program as defined in [15]; 

- Pep\ realizes the translation tr{KB; Ui,. . . , Un) from [15], which compiles the ini- 
tial knowledge base KB and the sets of update commands C/i ,...,[/„, in response 
to the events Ei, . . . ,Enm s = {KB, Ei, . . . , En), into a sequence {Pq, . . . , P„) 
of ELPs. The resulting compilation compEp\{-) is incremental. 

Observe that, while tr{-) as in [15] is involved and has to keep track of persistent 
update commands always [.event] (r ) from the past, as shown in [ 1 6] , it is possible, by 
encoding persistent commands in polynomial time in the belief set, to restrict actions, 
without loss of expressiveness, to the connmands assert and retract (whose meaning 
is the intuitive one) and making p actually depend only the belief set BeZ(7r„_i(s)) of 
the predecessor and the event E^. 

4.2 Dynamic Logic Programs, LUPS, and LUPS* 

Dynamic logic progranraiing [1,2] can be captured by the following evolution frame: 

FjF Q = {A, SCgp , AC ins ) ^ins : Pins ; ; 

where £Cgp is the collection of all finite sets of generalized logic program rules, i.e., 
no strong negation is available and weak negation can occur in the head of rules, and 
-BeZ0(-) is the semantics of dynamic logic programs as given in Section 2. 
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The LUPS framework [3] for update specifications corresponds to the following 
evolution frame: 

EFl = {A,£CL,ACL,nL,PL,BelQ), 

where 

- £Cl is the collection of all finite sets of LUPS statements (cf. [3]); 

- ACl = {assert(r), retract(r), always(r), cancel(r), 

assert_event(r), retract_event(r), always_event(r) | r G jC_a.}, 
where the commands have the meaning explained in [3]; 

- IIl is defined by nL{s,E) = {cmd{r) G ACl \ E contains cmd(r) when cond 
and cond e Be/®(s)}; 

- PL is as described in [3]; that is, pl{s, A) adds for s = {KB, Ei, . . . , En) and 
A a program Pn+i to the sequence of programs (Pq, ■ ■ ■ ,Pn) associated with s, 
returning {Pq, . . . , P„+i), where P„+i is computed from the persistent conmiands 
PC„ vaUd at state s, Bel{s), and the LUPS coimnands in A. 

In [24], the semantics of LUPS has been slightly modified and extended by a per- 
manent retraction command. The resulting framework, LUPS*, can be captured by the 
following evolution frame: 

EFl^ = {A,£CL',ACL',nL',PL',Belis), 

where 

- £Cl* is the collection of all finite sets of LUPS* statements (cf. [24]); 

- ACl" = {assert(r), retract(r), assert_event(r), retract_event(r), 

always assert (r), always retract (r), always assert_event(r), 
always retract_event(r), cancel assert (r), cancel retract (r) | 

r e Ca}, 

where the commands have the meaning as described in [24]; 

- IIl' is defined by 77^. (s, E) = {cmd{r) £ ACl* \ E contains cmd{r) when cond 
and cond G Belq){s)}; 

- pL* is given as in [24]; like before, pl* (s, A) adds a program Pn+i to the sequence 
of programs (Pq, . . . , P„) associated with s, where P„+i is computed from persis- 
tent commands PC* valid at state s, Bel{s), and the LUPS* commands in A. 

Like in the case of EPI, the compilation functions compj^{-) and compj^.{-) are 
incremental, and also persistent commands (always(r) and always.event (r), as well 
as always assert(r), always assert_event(r), always retract(r), and always 
retract_event(r), respectively) can be eliminated through coding into the knowledge 
base. 

4.3 Revision Programs 

In [27, 28], a language for revision specification of knowledge bases is presented, which 
is based on logic prograrmning under the stable model semantics. A knowledge base is 
in this context a set of atomic facts, i.e., a plain relational database. Revision rules 
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describe which elements are to be present (so-called m-rules) or absent (out-mles) from 
the knowledge base, possibly under some conditions. A fixed-point operator, which 
satisfies some minimality conditions, is introduced to compute the result of a revision 
program. As for stable models, there may be several knowledge bases or no knowledge 
base satisfying a given revision program. 

The framework of revision programs can be captured by the following evolution 
frame: 

EF^Rev = {•^,£Ci{ey,ACi{ev,niiey,piiey,Beliiev), 

where 

- £Cftev is the collection of finite sets of revision rules, i.e., negation-free rules whose 
constituents are of the form in(B) or out{B), where i? is an atom from A; 

- ACRev = {insert{B), delete{B) \ B & A}; 

- Bjiev is defined by nney{s,E) {insert{B) \ B e 1} U {delete{B) \ B € O}, 
where (/, O) is the necessary change (cf. [27]) for comp{s) with respect to E; 

- pRev is defined by PRev{s, 0) = KB if s = {KB), and 

PRev{s,A) = {comp{s) U {B \ insert{B) e A}) \ {B \ delete{B) e A} 

otherwise, i.e., piiev{s,A) corresponds to p±{s,A) where P{s) = comp{s). No- 
tice that pRev{s, A), and in particular comp{s), where s = {KB; Ei,. . . , En), is 
thus a set of facts. 

- Bel Rev is such that, for each ELP P, it returns the collection of facts in P. 
4.4 Abductive Theory Updates 

Inoue and Sakama [21] developed an approach to theory update which focuses on non- 
monotonic theories. They introduced an extended form of abduction and a framework 
for modeling and characterizing nonmonotonic theory change through abduction. Intu- 
itively, this is achieved by extending an ordinary abductive framework by introducing 
the notions of negative explanation and anti-explanation (which makes an observation 
invalid by adding hypotheses), and then defining autoepistemic updates by means of 
this framework. 

The framework of extended abduction is then used in [21] to model updates of 
nonmonotonic theories which are represented by ELPs. For theory updates, the whole 
knowledge base is subject to change. New information in form of an update program has 
to be added to the knowledge base and, if conflicts arise, higher priority is given to the 
new knowledge. The updated knowledge base is defined as the union Q U C/ of the new 
information U and a maximal subset Q C P of the original program that is consistent 
with the new information (which is always assumed to be consistent). The abductive 
framework is in this context used for specifying priorities between current and new 
knowledge, by choosing as abducibles the difference between the initial and the new 
logic program. The framework for updates by means of abduction can be captured by 
the following evolution frame: 

EFAbd = {A,£CA,ACAbd,nAbd,PAbd,BelAbd), 

where 
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- ACAbd = -ACins U ACdei, where ACdei = {delete{r) \ r e Ca}\ 

- IlAbd is defined by 

IlAbdis, E) = {insert{r) | r e .B} U {delete{r) \ r € F C comp{s) \ E}, 

where F is, as defined in [21], a maximal set of rules to be removed from the current 
knowledge base comp{s), which is a single logic program. Note that, in general, F 
may not be unique. Hence, for a deterministic update policy, we assume a suitable 
selection function a which chooses one of the possible outcomes for F. 

- pAbd is defined by pAbd{s, 0) = KB if s = {KB), and 

PAbd{s,A) = {comp{s) \ {r \ delete{r) £ A}) U {r \ insert{r) G A} 

otherwise, i.e., pAbd amounts to p±{s, A) for P(s) = comp{s), provided that A 
does not contain conflicting commands delete{r) and insert (r) for any rule r. 

- BelAbdis such that, for any ELP P, it is the ordinary answer set semantics of ELPs. 

4.5 Program Updates by means of PLPs 

In [34], the update of a knowledge base of ground literals by means of a prioritized logic 
program (PLP) is addressed. The idea in updating the initial program, P, with respect 
to the new one, Q, is to first eliminate contradictory rules from P with respect to Q, 
and then to solve conflicts between the remaining rules by means of a suitable PLP. The 
semantics of the update is thus given by the semantics of the corresponding PLP, for 
which Zhang and Foo use the one they have proposed earlier in [35], which extends the 
answer set semantics. The method is to reduce PLPs to ELPs by progressively deleting 
rules that, due to the defined priority relation, are to be ignored. The answer sets of the 
resulting ELP are the intended answer sets of the initial PLP. Formulated initially for 
static priorities, the method was extended to dynamic priorities, which are handled by 
a transformation into a corresponding (static) PLP. 

The framework for updates by means of PLPs is defined only for single step updates, 
and a generahzation to multiple steps is not immediate. We can model a single-step 
update by the following evolution frame: 

EFpLP = {A, EC^, ACins ^ ACdei, IIpLP, PPLP,BelpLp), 

where 

- UpLP is defined by npLp{s,E) = {insert{r) | r e £} U {delete{r) \ r € 
R{s, E)} where R{s, E) is computed, along the procedure in [34], as a set of rules 
to be retracted from the current knowledge base; 

- ppLP is defined by pplp{s,^) = KB \f s = {KB),wd ppLp{s,A) = (Pi,P2) 
otherwise, where Pi = comp{s) \ {r \ delete{r) € A} and P2 = {r \ insert{r) G 

A}; 

- BelpLp is the semantics for prioritized logic programs [35], viewing (Pi, P2) as a 
program where the rules of P2 have higher priority than the ones in Pi. 

Thus, several well-known approaches to updating logic programs can be modeled 
by evolution frames. 
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4.6 Further approaches 

We remark that further approaches, though not concerned with logic programs, might 
be similarly captured. For example, to some extent, Brewka's declarative revision strate- 
gies [8] can be captured. Brewka introduced a nonmonotonic framework for belief 
revision which allows reasoning about the reliability of information, based on meta- 
knowledge expressed in the object language itself. In this language, revision strategies 
can be declaratively specified as well. The idea is to revise nonmonotonic theories by 
adding new information to the current theory, and to use an appropriate nonmonotonic 
inference relation to compute the accepted conclusions of the new theory. 

The desired result is achieved in two steps. The first step consists in an extension 
of default systems in order to express preference information in the object language, 
together with an appropriate new definition of theory extensions. In a second step, a 
notion of prioritized inference is introduced, formalized as the least fixed-point of a 
monotone operator, thus identifying epistemic states with preferential default theories 
under this ad hoc semantics. The approach can be captured by a suitable evolution frame 

EFt = {A,£CT,ACT,nT,PT,BelT), 
which naturally models the insertion of formulas into a preference default theory, i.e., 

- £Ct is the set of all propositional formulas of the language; 

- ACt = {insertif) \ f G £Cr}\ 

- Ilr is implicitly encoded in the current knowledge state (i.e., the current preference 
default theory, cf. [8]), and is such that n-r{s,E) = IIins{s,E) = {insert(f) \ 
f&E); 

- pr produces the new preference default theory by simply executing the insertion of 
the new formula(s) into it, i.e., pt{s, A) = Pins{s, A) = T{.s) U {/ | insert{f) G 
A}, where T (s) = comp{s) and pris, 0) = KB if s = {KB), as usual; and 

- Belr is the function assigning to each preference default theory its set of accepted 
conclusions, as defined in [8]. 

However, there also exist frameworks which take a different point of view and cannot 
be captured by our definition of an evolution frame. This is the case if the state of an 
agent and the environment, and thus the action taken by an agent, are dependent on the 
whole history of events and actions taken (which is also known as a run), not only on 
the current state. The approach of Wooldridge [33] is an example of such a framework. 

5 Reasoning About Knowledge-Base Evolution 

We now introduce our logical language for expressing properties of evolving knowledge 
bases, EKBL (Evolving Knowledge Base Logic), which we define as a branching-time 
temporal logic akin to CTL [17], which has become popular for expressing temporal 
behavior of concurrent processes and modules in finite state systems. 
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Syntax. The primitive logical operators of the language EKBL are: 

- the Boolean connectives A ("and") and ~ ("not"); 

- the evolution quantifiers A ("for all futures") and E ("for some future"); and 

- the linear temporal operators X ("next time") and U ("until"). 

Atomic formulas of EKBL are identified with the rules in the language C_a, given 
an alphabet A; composite formulas are state formulas, as defined — ^by means of atomic 
formulas and evolution formulas — ^below. Note that we use the symbol ~ for negation 
in composite formulas, in order to distinguish it from the negation symbols used in 
atomic formulas occurring in rules. 

1 . Each atomic formula is a state formula. 

2. If (fi and ip are state formulas, then (p Aip and ^(p are state formulas. 

3. If is an evolution formula, then Eip and A(p are state formulas. 

4. lf<f,tp are state formulas, then X<^ and ifiUip are evolution formulas. 

Intuitively, evolution formulas describe properties of the evolving knowledge base, 
since they use the hnear-time operators "next time" and "until," which apply to a given 
infinite evolution path consisting of knowledge states which are reached by successive 
events. The operator X refers to the next state of the path and states that the formula (p 
is true, while the operator U refers to a (possibly empty) initial segment of the path, and 
asserts that (p holds true in each state of this segment and that immediately after it ip 
holds true. 

We may extend our language by defining further Boolean connectives V ("or"), D 
("impUes"), and = ("equivalence") in terms of other connectives, as well as important 
linear-time operators such as ftp ("finally p") and Gp ("globally p"), which intuitively 
evaluate to true in path p if (pis true at some resp. every stage pi. 

The following examples illustrate the use of the logical language EKBL for express- 
ing certain properties a of given evolution frame. 

Example 6. Even for our rather simple shopping agent of Example 4 some interesting 
properties can be formulated. For convenience, we allow in formulas non-ground rules 
as atoms, which is a shorthand for the conjunction of all ground instances which is 
assumed to be finite. Recall that we identify facts with Uterals. 

- There can never be two current dates: 

VJi = AG{{date{T) A date{T')) D T = T'). (2) 

- If there is a shop on sale which is up, then a query is always performed: 

ip2 = AG{{up{S) A {sale{S)) D site_queried). (3) 

Example 7. In order to see whether the mail agent in Example 5 works properly, the 
first property of the previous example (formula (2)), stating that there can never be two 
different current dates, appUes with sUght syntactic modifications, i.e., 

(p>3 = AG{{today{D) A today{D')) D D = D'). (4) 
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In addition, we may consider the following properties. 

- The type of a message cannot change: 

^4 = AG{type{M,T) D r^EF{type{M,T') A T T')). (5) 

- If a message is removed or saved (at least once), then the message is never trashed 
until it is either deleted or saved: 

<^5 = AG( {msg{m) a AF{r6m,oj}e{rn.) V save{rn,))) D 

A{^trash{m)U{remove{m) V save{m)) ). (6) 

Semantics. We now define formally the semantics of formulas in our language with 
respect to a given evolution frame. To this end, we introduce the following notation. 

Definition 7. Given an event class £C, a path is an (infinite) sequence p = (sj)j>o of 
knowledge states Si G KS{£C) such that Sj is a successor ofsi-i, for every i > 0. By 
Pi we denote the knowledge state at stage i in p, i.e., pi = Si, for every i > 0. 

Definitions. Let EF = {A. EC, AC, 11, p, Bel) be an evolution frame, let s be a 
knowledge state over £C, and let p be a path. The satisfaction relation EF, s \= ip, 
resp. EF,p \= ip, where is an EKBL formula, is recursively defined as follows. ■ 

1. EF, s \= r iffr e Bel{s),for any atomic EKBL formula r; 

2. EF, s h ^1 A ^2 iff EE, s \= ipi and EF, s \= v?2; 

3. EF,s^^^iffEF,s^^; 

4. EF, s ^ E(p iff EF, p' \= (p, for some path p' starting at s; 

5. EF, s ^ A(p iff EF,p' \= ip, for each path p' starting at s; 

6. EF,p^XipiffEF,pi\=ip; 

7. EF,p \= (piUip2 iffEF,pi \= (p2 for some i > and EF,pj \= ipiforallj < i. 

If EF, s 1= (resp., EF .p \= p) holds, then knowledge state s (resp., path p) is 
said to satisfy formula ip in the evolution frame EF, or ip is true at state s (resp., path 
p) in the evolution frame EF. 

Notice that any evolution frame EF induces an infinite transition graph which 
amounts to a standard Kripke structure Kef = {S,R,L), where S = Sef is the 
set of knowledge states, R is the successor relation between knowledge states, and L 
labels each state s with Bel{S), such that s satisfies p in EF iff Kef, s \= ip (where 
1= is defined in the usual way). 

As easily seen, the operators F and G are expressed by Ft/? = TXiip and Qip = 
~(TU~(/3), respectively, where T is any tautology; thus, AGpi — ^E{~Y\}^(p) and 
EQip> = ~A(TU~iy9). Other common linear-time operators can be similarly expressed, 
e.g., ipEil) = ~((~<^)UV') CV before ip"), or ipVip = ~(~(^U(~V')) ('V releases ip"). 

Let us reconsider our miming examples. 

Example 8. It is easily verified that the initial knowledge base KB of the shopping 
agent satisfies both formulas (2) and (3) in the respective EPI evolution frame EFep\, 
i.e., EFep\,KB \= ipi and EFep\,KB \= ip2. 

As for KB as in Example 5 for the mail agent, this set satisfies formulas (4) and (6) 
in the respective EPI evolution frame EFep\, i.e., EFep\, KB \= ip^ and EFep\, KB \= 
ip4, while it is easily seen that it does not satisfy formula (5), i.e., EFep\ , KB y= ip^ . 
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In what follows, we are mainly interested in relations of the form EF, KB \= ip, 
i.e., whether some formula (p is satisfied by some initial knowledge base KB with 
respect to some given evolution frame EF. In particular, we analyze in Section 7 the 
computational complexity of this problem. 

6 Knowledge-State Equivalence 

While syntactically different, it may happen that knowledge states s and s' are seman- 
tically equivalent in an evolution frame, i.e., s and s' may have the same set of conse- 
quences for the current and all future events. We now consider how such equivalences 
can be exploited to filtrate a given evolution frame EF such that, under suitable con- 
ditions, we can decide EF, s ^ <^ in a finite structure extracted from the associated 
Kripke structure Kef- 

We start with the following notions of equivalence. 

Definition 9. Let EF = {A, £C, AC, 77, p, Bel) be an evolution frame and fc > some 
integer. Furthermore, let s, s' be knowledge states over SC. Then, 

1. s and s' are fc-equivalent in EF, denoted s =%p s', if Bel {s + Ei, . . . , E^') = 

Bel{s' + El, .... Eki), for all events Ei, . . . , Ek^ from EC, where k' G {0, . . . , k}; 

2. s and s' are strongly equivalent in EF, denoted s =ef s', iff s =%p s' for every 
k>0. 

We call 0-equivalent states also weakly equivalent. The following result is obtained 
easily. 

Tlieorem 1. Let EF = {A, £C, AC, U, p, Bel) be an evolution frame and s, s' knowl- 
edge states over SC. Then, 

1. s =EF •s' implies that EF, s \= ip is equivalent to EF, s' \= p, for any formula ip; 

2. s =EF s' implies that EF, s \= (p is equivalent to EF, s' \= p, for any state 
formula p in which U does not occur and the nesting depth with respect to E and A 
is at most k. 

Proof. We prove Part 1 of the theorem by induction on the formula structure of the state 

formula p. 

Induction Base. Let ip be an atomic formula and assume s =ef s', for knowledge 
states s, s'. Obviously, it holds that Bel{s) = Bel{s'). Thus, it follows that EF, s\=p 
iff Bel{s') \= p and, hence, EF,s\=p) iff EF, s' \= p>. 

Induction Step. Assume that Part 1 of Theorem 1 holds for formulas ij; of depth at 
most n — 1, i.e., s =ef s' implies EF, s |= ^ iff EF, s' \= tp. Let p>be a formula of 
depth n, and consider the following cases. 

- = Vi A V'2 or = Then, ipi and ^2 are of depth n — 1 and, by the 

induction hypothesis, it holds that EF, s ^ iff EF, s' \= tpi and EF, s' \= ip2, 
respectively EF,s \= p iff EF, s' ^ tpi. Thus, again EF,s ^ p) iff EF, s' \= p 
follows. 
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- = Eip ov ip — Atp. Then, ip is an evolution formula of depth n — 1 of the form 
X^i or tpi\Jip2, where tpi and ip2 have depth n — 2. Since s =ef s', we have 
that EF,p 1= V for a path p = (si)i>o such that sq = s iff EF,p' \= tp, where 
p' = (s^)i>o results from p by replacing Si with any s'^ such that Sj =ef s^, for 
all i > 0. Since sq =ef Sq, for each « > 0, such an s- exists. Thus, the induction 
hypothesis implies that EF,p ^ ip iff EF,p' ^ V^. 

Hence, EE, s \= Eip iff EE, s' \= Eip follows. By symmetry of =ef, we similarly 
conclude that EE, s\=AipiS EE, s' \= Aip. 

Thus, for every state formula of depth n, the statement in Part 1 of Theorem 1 holds. 
This concludes the induction and proves Part 1 of our result. 

Concerning Part 2 of the theorem, observe that in order to prove a formula ip in 
which U does not occur and the evolution quantifier depth is at most fc > 0, initial path 
segments of length at most A: + 1 need to be considered. This follows from the fact that 
evolution subformulas of (p can only be of form Xip. Moreover, since every evolution 
formula must be preceded by a quantifier E or A, at most k nested evolution formulas 
can occur in and every evolution formula of the above form, i.e., Xip, can be verified 
by considering the truth value of ip in successor states of the current state. Hence, initial 
path segments of length at most fc + 1 do suffice. Since for two knowledge states s and s' 
such that s =%p s', all knowledge states reachable in k steps are equivalent, EE, s \= (p 
iff EE, s' \= (p holds by the same inductive argument as in the proof of Part 1 above. 
Thus, Part 2 of Theorem 1 follows. □ 

By Part 1 of Theorem 1, strong equivalence can be used to filtrate an evolution frame 
EE in the following way. For an equivalence relation E over some set X, and any x G 

X, let [x]e ^ {y \ X E y} be the equivalence class of x and let X/E — {[x]e \ x E X} 
be the set of all equivalence classes. Furthermore, E is said to have a finite index {with 
respect to X), if X/ E is finite. 

Then, any equivalence relation E over some set 5' C Sef of knowledge states of 
EE compatible with =ef (i.e., such that sEs' implies s =ef s', for all s,s' € S) 
induces a Kripke structure K^'f = {S/E,Re,Le), where [s\eRe [s'Ib iff sRs' 
and Le{[s\e) = L{s), which is bisimilar to the Kripke structure Kef restricted to the 
knowledge states in S. Thus, for every knowledge state s and formula (p, it holds that 
EE, s ^ iff K^p , [s]e h for ^ ^ ^ef such that S contains all descendants 
of s. 

In the following, we consider two cases in which S/E has finite index. Prior to this, 
we introduce some convenient terminology and notation. 

For any state s G Sef, we denote by dsc{s) the set of knowledge states containing s 
and all its descendants (with respect to £C in EE, which will be clear from the context), 
and by T(s) the ordered tree with root s where the children of each node s' are its 
successor states according to EE, and s' is labeled with Bel{s'). Furthermore, for any 
S C Sef, we define dsc{S) = Uses dsc{s), and call S successor closed, if S* = 
dsc{S), i.e., each successor of a knowledge state in S belongs to S. Note that for any 
s e See, ^(s) has node set dsc{s), which is successor closed. 
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6.1 Local belief operators 

In the first case, we consider =ef itself as a relation compatible with strong equiva- 
lence. We obtain a finite index if, intuitively, the belief set Bel{s) associated with s 
evolves differently only in a bounded context. This is made precise in the following 
result. 

Theorem 2. Let EF = £C, AC, II, p, Bel) be an evolution frame such that £C is 
finite, and let S C Sef be a successor-closed set of knowledge states over SC. Then, 
the following two conditions are equivalent: 

1. = EF has a finite index with respect to S. 

2. =%p has a finite index with respect to S and there is some k > such that s =%p s' 
implies s=ef s', for all s,s' G S. 

Proof. 

(2 => 1). Consider, for any s € S, the tree T (s). At depth i > 0, there are \£C\^ different 
nodes, and thus up to depth k in total X^iLo \^C\^ = ^ < '2\£C\'^ many different 

nodes if \£C\ > 1, and A; + 1 many if \£C\ = 1. Thus, ifd= \S/ =ef I is the number 
of different equivalence classes of the relation =%p with respect to 5, then there are 
less than c = (fmax(2|fC| ,fe+i) ^^j^y trees T(,s), where s £ S, which are different up 
to depth k. Thus, there are at most c knowledge states si, . . . ,Sc, Si & S,l < i < c, 
which are pairwise not strongly equivalent. Consequently, = ef has at most c different 
equivalence classes with respect to S, and thus =ef has a finite index with respect 
to S. (1 ^ 2). Suppose the relation =ef has at most n different equivalence classes 

with respect to S. Then, there are at most n knowledge states si , . . . , s„ S S which are 
pairwise not strongly equivalent, i.e., Sj ^ ef sj for all 1 < i < j < n. Since strongly 
equivalent states are also weakly equivalent, n is thus also a finite upper bound for the 
equivalence classes of the relation =ef with respect to S. 

Now, for j, j G {1, . . . , n} such that i ^ j, let I = be the smallest integer I for 
Si and Sj, I < i < j < n, such that Bel{si + Ei,. . . , Ei) ^ Bel{sj + Ei, . . . , Ei), 
but Bel{si + E[, . . . , E'^) = Bel{sj + E[,..., E'^), for all sequences of events 
E[, . . . ,E'^, < m < I. Furthermore, let k = maxj^j(Zj,j) be the largest such I 
over all Si and sj. Note that k is well defined and finite because of the finite index 
of =EF with respect to S. It follows that if any two knowledge states s,s' G S are 
fc-equivalent, then they are also strongly equivalent. Indeed, suppose the contrary, i.e., 
suppose s ^Ep s', but s ^ef s' . Then there exists a sequence of / events, I > k, 
such that Bel{s + Ei,...,Ei) ^ Bel{s' + Ei,...,Ei), but Belis + E[, . . . , E'^) = 
Bel{s' + E[,. . . , E'^) holds for all sequences of events E[,..., E'^, < m < k < I. 
From the assumption that s ^ef s', it follows that ,s =ef Si and s' =ef Sj, for some 
i,j € {1, . . . , n} such that i ^ j. This implies that > k, which contradicts the 
maximality of k. Thus, s =ef s' implies s =ef s', for a\l s,s' G S. □ 

The condition that =%p has a finite index, i.e., that only finitely many knowledge 
states s have different belief sets, is satisfied by common belief operators if, e.g., every 
knowledge state s is compiled to a sequence compEp (s) of ELPs or a single ELP over 
a finite set of function-free atoms (in particular, if ^ is a finite prepositional alphabet). 
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We remark that, as can be seen from the proof of Theorem 2, Condition 1 implies 
Condition 2 also for arbitrary S, while the converse does not hold in general for an S 
which is not successor closed. 

By taking natural properties of Bel{-) and comp^p^-) into account, we can derive 
an alternative version of Theorem 2. To this end, we introduce the following concepts. 

Definition 10. Given a belief operator Bel{-), we call update programs P and P' k- 

equivalent, Bel{P + (Qi, . . . , Qk)) = Bel{P' + (Qi, . . . , Qk)), for all programs 
Qi, ■ ■ ■ ,Qi (0 < i < k). Likewise, P and P' are strongly equivalent, if they are k- 
equivalent for all k > Q. We say that Bel{-) is fc-local, if k-equivalence ofP andP' 
implies strong equivalence ofP and P' , for any update programs P andP'. Furthermore, 
Bel{-) is local, if Bel{-) is k-local for some k >0. 

We obtain the following result. 

Theorem 3. Let EF = {A, £C, AC, 77, p, Bel) be an evolution frame such that £C is 
finite and =%p has a finite index with respect to some successor closed S C Sef- If 
Bel{-) is local and comp pp{-) is incremental, then =ef has a finite index with respect 
toS. 

Proof. Similar to the proof of Theorem 2, consider, for any knowledge state s G S, 

the tree T(s). Each node in s' has label Bel{s') = Bel{P + (Qi, . . . , Q„)), where 
P = comppp{s) and Qi, i > 1, are the increments of comppp{-) corresponding to the 
successive events Ei in s' = s + Ei, . . . ,En. Note that incrementaUty of comppp{-) 
guarantees that the length of com,p pp(s') is at most n plus the length of comp pp{s). 
Since Bel{-) is fc-local, up to depth k, there are at most c = (;™ax(2|£C|'',/c+i) j^j^y 
different trees, where d = \S/ =%p |. Thus, there are at most c update programs 
Pi, ■ ■ ■ ,Pc, and, hence, knowledge states si, . . . , s^, which are pairwise not strongly 
equivalent. Consequently, =ep has at most c different equivalence classes, from which 
the result follows. □ 

As an application of this result, we show that certain EPI evolution frames have a 
finite index. To this end, we use the following lemmata. 

We say that a semantics Bel{-) for sequences of prepositional ELPs satisfies strong 
noninterference, if it satisfies, for every prepositional update sequence P, the follow- 
ing condition: If, for every ELP Pi,P2, and Q such that Q Q P2 and no pair of 
rules r,r' exists with H{r) = ^H{r'), where r G Q and r' G (P2 \ Q) U Pi, then 
Bel{P, 7-*!, 7-2) = Bel{P, Pi U Q, P2 \ Q), i-e., the rules from Q can be moved from 
the last component to the penultimate one. 

Recall that Belpi-) is the belief operator of the answer set semantics of update 
programs 1 14J, as described in Section 2. 

Lemma 1. BelE{-) satisfies strong noninterference. 

Proof. The proof appeals to the rejection mechanism of the semantics. Let Pi, P2, and 
Q be ELPs, such that the following condition (*) holds: Q C P2 and no pair of rules 
r, r' exists with H{r) = -'H{r'), where r e Q and r' e (P2 \ Q) U Pi. 
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If Q = 0, the lemma holds trivially. So let r € Q, but no rule r' € Q exists such 
that H{r) = ^H{r'). Then, there must not be such a rule r' in Pi or P2, otherwise 
condition (*) is not fulfilled. Hence, no rule of Pi is rejected by r. Moreover, adding 
r to Pi can neither cause an inconsistency of Pi, nor can r be rejected by a rule from 
P2 \ Q. Thus, BelsiP + P^)) = BelsiP + (A U g, P2 \ Q)) holds in this case. 

Now let Q also contain some rule r' such that H{r) = ^H{r') (Pi carmot contain 
such rules without violating the condition (*)). Then, Q must contain all rules with 
heads H{r) and ^H{r) of P2, and no such rule may exist in Pi, in order to fulfill (*). 
Again, no rule of Pi can be rejected by any rule of Q, and no rule of Q can be rejected 
by any rule from P2 \ Q. Additionally, adding Q to Pi makes Pi inconsistent iff P2 
is inconsistent. As a consequence, also in this case, BelsiP + (Pi, P2)) = BelsiP + 
(Pi U Q, P2 \ Q)). Since there are no other possibihties left, the lemma is shown. □ 

In our next result, we require Part 1 of the following lemma, which in turn will be 
relevant in Section 7.1. 

Lemma 2. Let P and Q be sequences ofELPs. Then, 

1. BdsiP) = BelEiQ) ifU{P) = U{Q), and 

2. given that P and Q are propositional sequences over possibly infinite alphabets, 
U{P) = U{Q) ifBelEiP) = BelEiQ). 

Proof. As for Part 1, if W(P) = ll{Q) then BelE{P) = BelEiQ) is immediate from 
the definition of Belsi-)- 

To show Part 2, it suffices to prove that, given ELPs Pi and P2 over a set A of atoms, 
AS(Pi) = ^<S(P2) if BelEiPi) = BelEiP2). 

Suppose ^iS(Pi) ^ ASiP2), and assume first that A is finite. Without loss of general- 
ity, suppose that S = {Li, . . . , Lfe} G AS(Pi) but S ^ ASiP2). This means that the 
constraint 

c : *— Li, . . . ,Lk, notLk+i,. ■ ■ , not , 

where Lk+i, ■ ■ ■ , L„i are all the atoms from A missing in S, is in BelEiP2) but not in 
BelEiPi)- However, this contradicts the hypothesis that BelEiPi) = BelEiP2)- 

This proves the result for finite A. For infinite A, it is possible to focus on the finite 
set of atoms occurring in P U Q, since, as well-known for the answer set semantics, 
A,^A^S for each Ag A\A' andS G AS(P) if P is an ELP on A' C A. □ 

Now we can show the following result. 

Theorem 4. BelEi-) '■^ local. In particular, 1-equivalence of update programs P and 
P' implies k-equivalence of P and P' , for all k>l. 

Proof. We show the result for propositional update sequences P and P' by induction 

on fc > 1. Since the evaluation of BelEi-) for non-ground update sequences amounts 
to the evaluation of propositional sequences, the result for the non-ground case follows 
easily. 
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Induction Base. The base case k = 



1 is trivial. 



Induction Step. Assume that 1-equivalence of P and P' implies that they are (fc - 1 )- 
equivalent, A; > 1. Suppose further, that P and P' are 1-equivalent, but not fc-equivalent. 
Then, there exist programs Qi, . . . , Qk', where k' € {2, . . . , k}, such that BelsiP + 
Qi, ■ ■ ■ , Qk') / BelsiP' + Qi> • • • ; Qk'), i-e., according to Part 1 of Lemma 2, there 
exists a (consistent) answer set S e U{P + Qi, . . . , Qk'), such that 5* ^ U(P' + 
Qi, • • • I Qk')- We can remove every rule r from Qk'-i and Qk' such that either S ^ 
B{r), or r is a member of 

Rejk,-i{S,P + Qi, . . . , Qk') U Rejk'{S,P + Qi,..., Qk') = 

Rejk'.i{S,P + Qi,..., Qk') = Rejk'.i{S,P' + Qi,..., Qk'). 

Let the resulting programs be denoted by Q5c'-i *3fc" respectively. Note that still 
S£U{P + Qu---, Qk'-2,Q'k'-v Q'k') and S i U{P' + Qi, . . . , Qk'-2, Q'k'-i,Q'k') 
must hold, since these rules can neither be generating for S, i.e., fire with respect to S, 
nor reject other rules. Observe also that Q^/ _ ^ U Q'f., cannot contain a pair of rules with 
conflicting heads. Otherwise, contradicting our assumption, S would be inconsistent 
since both rules were generating for S. 

Now we construct the program Ql,_i = Q'k'^i U Q'k' - From the strong noninter- 
ference property (Lemma 1), it follows that BelsiP + Qij • • • i Qk'-2- Qk'-i- ^) 
BelsiP' + Qi, . . . , Qk'-2, 0)- Since, for every update sequence Q, BelsiQ + 

0) = BehiQ), it follows BelsiP + Qi, ■ ■ ■,Qk'-2, Ql>^,) + BehiP' + Qi, ■ ■ ■ , 
Qk'^2- Qfe'-i)- This means that P and P' are not k' — 1-equivalent; however, this con- 
tradicts the induction hypothesis that P and P' are A; — 1-equivalent. Hence, P and P' 
are fc-equivalent. □ 

Furthermore, in any EPI evolution frame EF = (A, £C, ^Cepi, -/7epi, Pepi, BcIe), 
the update policy TTepi is, informally, given by a logic program such that TTepi returns a 
set of update actions from a finite set Ao of update actions, which are compiled to rules 
from a finite set i?o of rules, provided £C is finite. Consequently, =%p has finite index 
with respect to any set S of knowledge states s which coincide on 7ro(s), i.e. the initial 
knowledge base KB. Furthermore, comp^p\{-) is incremental. Thus, from the proof of 
Theorem 3, we obtain: 

Corollary 1. Let EF = {A, £C, ACep\, nEp\, pep\, Bels) be an EPI evolution frame 
such that £C is finite, and let S C Sef be a successor-closed set of knowledge states 
such that {7ro(s) | s £ S'} is finite. Then, =ef has a finite index with respect to S. 
Moreover, \S/ =ef\ < rf^'^'^', where d = \S/ =%[ 

In [25], an analogous result has been shown for Bel(^{-), i.e., 1-equivalence of dy- 
namic update programs P and P' implies their strong equivalence, and, thus, Bel(^{-) is 
local. Since for update policies over the LUPS or LUPS* language and their respective 
compilations, the same as for their EPI counterparts holds, we also get the following 
result: 

Corollary 2. Let EF be a LUPS evolution frame {A,£C,ACL,nL,PL,Bel^) or a 
LUPS* evolution frame EF = {A, £C, ACl* , IIl* , pt* , Bel^) such that £C is finite, 
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and let S C Sef be a successor-closed set of knowledge states such that {7ro(s) | s G 
S} is finite. Then, =ef has a finite index with respect to S. Moreover, \S/ =ef\ < 
<p\^^\,whered=\S/ =%p\. 

6.2 Contracting belief operators 

Next, we discuss a refinement of strong equivalence, called canonical equivalence, 
which also yields a finite index, provided that the evolution frame possesses, in some 
sense, only a "bounded history". In contradistinction to the previous case, canonical 
equivalence uses semantical properties which allow for a syntactic simphfication of 
update programs. We need the following notions. 

Definition 11. Let Bel{-) be a belief operator. Then, Bel{-) is called contracting iff 
the following conditions hold: (i) Bel{P + + P') = Bel{P + P'), for all update 

programs P and P'; and (ii) Bel{P) = Bel{Po, . . . , Pi-i, Pi \ {r}, Pi+i, . . . , Pn), for 
any sequence P = {Pq, . . . , P„) and any rule r G PiCi Pj such that i < j. An evolution 
frame EF = {A, £C, AC, 77, p, Bel) is contracting ijfBel{-) is contracting. 

Examples of contracting belief operators are Bel e{-) and the operator Bel^ ( • ) (see 
Section 2). 

By repeatedly removing duplicate rules and empty programs from any sequence 
P = {Pq, . . . ,Pn) of ELPs, we eventually obtain a non-reducible sequence P* = 
{Pq, . . . , P^), which is called the canonical form of P. Observe that m < n always 
holds, and that P* is uniquely determined, i.e., the reduction process is Church-Rosser. 
We get the following property: 

Theorem 5. For any contracting belief operator Bel{-) and any update sequence P, 
we have that P and P* are strongly equivalent. 

Proof. We must show that P and P* are /c-equivalent, for every k>Q. The proof is by 
induction on > 0. 

Induction Base. We show that P and P* are 0-equivalent. The proof is by induction 
on the reduction process, i.e., on the number of required removals of rules or empty 
programs from P in order to obtain P* . For the induction base, suppose P = P* . 
Then, P andP* are trivially 0-equivalent. For the induction step, assume that Bel{Q) = 
Bel{Q*), for all sequences of programs Q such that the canonical form Q* can be con- 
structed using n — 1 removals of rules and empty programs. Let P be a sequence of pro- 
grams such that the construction of P* requires n removing steps, and let P' denote any 
sequence of programs obtained from P after n—1 removals. Then, Bel{P) = Bel{P'), 
by induction hypothesis. Furthermore, Bel{P') = Bel{P*) follows trivially from Bel 
being contracting. Thus, Bel{P) = Bel{P*). We have shown that for any sequence P 
of programs, if Bel{-) is contracting, then P and P* are O-equivalent. 

Induction Step. Suppose k > 0, and let g = {P + Qi, . . . ,Qk) and R = {P* + 
Qi, . . . , Qk). Furthermore, let Q* and R* denote the canonical forms of Q and R, re- 
spectively. We show that Q* =R*. 
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Suppose P* is obtained from P using n reduction steps and R* is obtained reducing 
R in m steps. We construct Q* as follows. We first perform n reduction steps on the 
subsequence P of Q, resulting in the sequence R. Then we apply m reduction steps on 
R. Since the reduction process is Church-Rosser, no further reductions can be apphed, 
which proves Q* = R*. From the induction base, it follows that Q and Q* are weakly 
equivalent, which proves fc-equivalence of P and P* . □ 

6.3 Canonical evolution frames 

In this section, we study the relationship between an evolution frame and its canonized 
form: 

Definition 12. Given an evolution frame EF, we call knowledge states s,s' S Sef 
canonically equivalent, denoted s ='ef W^hey are strongly equivalent in the can- 
onized evolution frame EF* , which results from EF by replacing comp^p^s) with its 
canonical form comppp{s)* (i.e., comppp»{s) = comppp{s)*). 

Immediately, we note the following properties. 

Theorem 6. Let EF be a contracting evolution frame. Then, 

1. EF, s \= <p iff EF* , s \= ^p, for any knowledge state s and any formula '.p. 

2. =^ is compatible with =EF,forany S C Sep, i.e., s =^ s' implies s=ef s', 
for every s,s' G S. 

Proof. In order to show Part 1, we consider the Kripke structures Kef and Kef', cor- 
responding to a contracting evolution frame EF and its canonized evolution frame, re- 
spectively. Since, for every s G 5, it holds that Bel{comp pp{s)) = Bel{com.p pp{s)*) 
= Bel{compEF' (s)), equal states have equal labels in KpF and Kef'- Hence, Kef 
and Kef' coincide. As a consequence. Kef, s\= ^piW Kef* ,s\= (p, for every s € S, 
and hence EF, s ^ (p iff EF* , s \= tp, for every s e Sef- 

As for the proof of Part 2, assume s =^ s', for s, s' € S and some S C 
See- Then, Bel{compEF- (s)) = Bel{compEF- {s')). Moreover, Bel{comp ef{s)) = 
Bel{com,p pp,{s)) holds, as well as Bel{comppp{s')) = Bel{com,ppp,{s')), which 
implies Bel{comp ef{s)) = Bel(compEF{s')), and the same is true for all corre- 
sponding successor states of s and s' due to the fact that they are canonically equivalent. 
Thus, s ='^EF implies s =ef s', for every s, s' £ S. □ 

As a result, we may use for filtration of EF, based on the following concept. 

Definition 13. Let EF = {A, £C, AC, 77, p, Bel) be an evolution frame and c> an 
integer We say that EF is c-bounded if there are functions a, f, and g such that 

1. a is a function mapping knowledge states into sets of events such that, for each 
s ~ {KB; El, . . . , En), oi{s) = {En-c'+i, ■ ■ ■ , En}, where c' = min(n, c), and 

2. n(s, E) = f{Bel(s),a{s), E) and p{s. A) = g(Bel{s), a(s) , A), for each knowl- 
edge state s G See, each event E G £C, and each A C AC. 
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This means that in a c-bounded evolution frame, the compilation comp^p{s) only 
depends on the belief set of the predecessor s' of s and the last c + 1 events in s 
(including the latest event). In particular, c = means that only the latest event needs 
to be considered. 

Theorem 7. Let EF = {A,£C, AC, 11, p, Bel) be an evolution frame where £C is 
finite, and let S C Sef be successor closed and such that {7ro(s) | s e 5} is finite. 
If (i) EF is contracting, (ii) there is some finite set Rq C Ca such that comp pp{s) 
contains only rules from Rq, for every s G S, and (Hi) EF is c-bounded, for some 
c > 0, then has a finite index with respect to S. 

Proof. We prove that =^ has finite index with respect to S by means of Theorem 2. 
That is, we must show that =%p* has finite index with respect to 5* and that there exists 
a > 0, such that for any two knowledge states s, s' G S, s =%p» .s' implies s =g™ s'. 

We first show that the relation =%p*, i.e., weak canonical equivalence, has finite 
index with respect to S. 

For any knowledge state ,s G S, comppp, (s) yields an update sequence P of at most 
|i?ol programs, i.e., P = {Pq, . . . , P„) and n < \Ro\ holds. To see this, suppose other- 
wise thatn > |i?o|- Since comppp,{s) is canonical (and thus contracting under empty 
updates), none of the programs Pi, < i < n, is empty. Furthermore, since comppp (s) 
only contains rules from Rq, this also holds for comppp, (s). Hence, there must be at 
least one rule r S Rq, which occurs in at least two programs Pi, Pj, < i,j < n, 
and 7 / j. This, however, contradicts the fact that com,ppp, (s) is canonical (and thus 
contracting under rule repetition). Hence, our assumption does not hold, which proves 
n < l-Rol- Moreover, | lJ"=o — l^ol holds for the canonical compilation P by the 
same argument: If | lJ"=o ^« I l^o |, then there must be at least one rule r E Rq, such 
that r e Pi n Pj for at least two programs Pi, Pj, < i < j < n; this contradicts that 
comppp, (s) is contracting. 

As a consequence, we can roughly estimate the number of different canonical com- 
pilations comppp,{s) by 

d = 2l^»l-i(|i?o| + 1)! = C'(2l^°l(i°sl«''l+i)) 

(note that (|i?o| + 1)! < 2i+(l^<'l-i) i°8(l^<'l+i) < 21+1^01 '"sl^"! for |i?o| > 0). This 
upper bound can be explained as follows. A canonical compilation need not contain all 
rules of Rq, hence we add a special fact for signaling that, given an ordered sequence 
of rules from Rq and the special fact, a canonical compilation consists of all rules in the 
sequence up to the special fact. There are (|i?o| + 1)' permutations of such sequences, 
which is an over-estimate of the number of canonical compilations consisting of differ- 
ent ordered sequences of rules. For each such sequence, there are 21^" I -i possibilities 
for the rules to be grouped into sequences of at most |i?o| + 1 programs, respecting 
their order. To see this, observe that if we fixed a grouping into a sequence of programs 
for all but the last rule, then for the last rule there are two possibilities: It can either be 
added to the last program of the sequence, or we add a new program, consisting of the 
last rule only, to the sequence. Applying this argument recursively and observing that 
for the first rule there is only one possibility — it has to go into the first program of the 
sequence — ^the given bound follows. Hence, at most d different canonical compilations 
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comp^p, [s) can be built for all s G S. Thus, at most different belief sets Bel{s) exist 
among all s G S, proving that =%p-^ has finite index with respect to S. 

Secondly, we show by induction on A; > c that for any two knowledge states s,s' G 
S canonical c-equivalence s =%p* s' implies strong canonical equivalence s s', 
which proves our result in virtue of Theorem 2. More precisely, we show for all k > c, 
that in the canonized evolution frame EF* , c-equivalence of knowledge states s,s' G S 
impUes their fc-equivalence in EF*. 

Induction Base (k = c). Canonical c-equivalence of knowledge states s,s' G S 
trivially impUes s=%p, s'. 

Induction Step (k > c). Assume that, for any two knowledge states s,s' G S and 
some k > c, s =%p, s' implies s ='^\ s'. We show that under this assumption 
s ^%p, s' follows. 

Let Sfe = s + Ei,...,Ek, Sfc_i = s + Ei,.. .,Ek-i, = s' + Ei, ...,Ek, and 
s'f,_i = s' + El, . . . , Ek-i- Since fc > c, the sets c({Sf._i) and cx{s'^_i) are equal and 
Bel{sf._^) — Bel{s'i^_^) holds by induction hypothesis. Hence, the following equa- 
tions hold: 

A = f{Bel{sk_,), a{Sk_i),Ek) = f{Bel{s'^_^), a{s'^_,),Ek), and 
g{Bel{sk_i), a{sk_i),A) = g{Bel{sk_i), Q!(4_i), A). 

Consequently, the equality comp pp{sj^) ~ comppp{s'j^) holds, which implies that 
comppp.{Sj.) = comppp.{s'i,), andWrns Bel{Sf.) = -Be^(s^). This proves canoni- 
cal fc-equivalence. 

This proves that s =pp, s' implies s =£™ s', for any two knowledge states ,s, ,s' G 
S. Since we have also shown that =%p* has finite index with respect to S, it follows 
from Theorem 2 that ='^p has finite index with respect to S. □ 

We remark that the existence of Rq is trivial if we have a function-free (finite) 
alphabet, and, as common in many logic programming semantics, repetition of literals 
in rule bodies has no effect, and thus the set of nonequivalent rules is finite. A similar 
remark applies to the initial knowledge bases ttq (s). 

7 Complexity 

In this section, we investigate the computational complexity of our evolution frame- 
work. To this end, in what follows we assume that the alphabet A of the evolution 
frames under consideration is finite and propositional. Thus, we only deal with finite 
propositional (sequences of) programs which are the result of the state compilation 

comp{s). 

First, we study the computational complexity of the following reasoning task: 

TempEvo: Given an evolution frame EF = {A, EC, AC, IT, p, Bel), a knowledge 
state s over £C, and some formula 95, does EF, s\= (f hold? 

In order to obtain decidability results, we assume that the constituents of the evolu- 
tion frame EF in TempEvo are all computable. More specifically, we assume that 



30 



(i) £C, AC, and Bel are given as computable functions deciding E G EC, a € AC, 
and r G Bel{P), and 

(ii) n and p are given as computable functions. 

Nonetheless, even under these stipulations, it is easy to see that TempEvo is undecid- 
able. Indeed, the compilation function may efficiently simulate Turing machine com- 
putations, such that the classical Halting Problem can be encoded easily in the above 
reasoning problem. 

The results of Section 6 provide a basis for characterizing some decidable cases. We 
consider here the following class of propositional evolution frames. 

Definition 14. Let EF = {A, EC, AC, U, p, Bel) be a propositional evolution frame 
{i.e., A is propositional). Then, EF is called regular if the following three conditions 
hold: 

1. The membership tests E G £C and r G Bel{P) are feasible in PSPACE {e.g., 
located in the polynomial hierarchy), and the functions U and p are computable in 
polynomial space {the latter with polynomial size output). 

2. Rules in compilations camp ^p{s) and events E have size polynomial in the repre- 
sentation size of EF, denoted by \\EF\\ {i.e., repetition of the same literal in a rule 
is bounded), and events have size at most polynomial in \ \ EF \ \ . 

3. Bel{-) is fully characterized by rules of length polynomial in \\EF\\, i.e., there is 
some constant c such that r G Bel(P) iff r ^ Bel{P') for all rules r of length 
< ||-E'F||'^ implies Bel{P) = Bel{P'), for all update sequences P and P'. 

Conditions 1 and 3 apply to the approaches in [2, 13, 15, 27, 28, 21, 34], and Condi- 
tion 2 is reasonable to impose; note that none of these semantics is sensible to repetitions 
of hterals in rule bodies. However, we could imagine semantics where, similar as in lin- 
ear logic, literals are "consumed" in the inference process, and that repetition of hterals 
alludes to available resources. 

Before we state our first complexity result, let us briefly recall some well-known 
complexity results for the above-mentioned approaches. Deciding whether a hteral 
L G Bel{P), for a literal L and a finite, propositional ELP P is coNP-complete. The 
complexity does not increase for the update approaches in [2, 13, 15,27,28,34], i.e., 
deciding L e Bels{P) is coNP-complete for S G {E, 0, Rev, PLP}, where P is 
a finite, propositional sequence of (at most two in case of PLP) ELPs. However, the 
complexity for abductive theory updates [21], when considering all possible selection 
functions, increases one level in the polynomial hierarchy: Deciding L G BelAbd{P) is 
Tll'-complete. 

The following lemma will be used several times in the sequel. 

Lemma 3. Given a regular evolution frame EF = {A, £C, AC. n. p, Bel), a knowl- 
edge state s G Sef, and a formula suppose that =ef has finite index, c, with re- 
spect to S = dsc{s). Then, there exists a deterministic Turing machine M which checks 
EF , s \^ if in space polynomial in (q + I) ■ {rris + log c + | [ EF \ \ + \\(p\\), where q is the 
nesting depth of evolution quantifiers in ip, iris is the maximum space required to store 
s' G S representing a class ofS/ =ef, and ||(p|| denotes the size of formula ip. 
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Proof. We first show that for evaluating evolution quantifiers Eifj or A?/;, we may con- 
sider finite paths of length c in EF. Note that every path of length greater than c in 
EF must contain at least one pair of strongly equivalent knowledge states. While this 
is trivial if V' is of form X'i/'i, consider the case where tl) is of form UV'2- 

If a path p starting at s of arbitrary length exists such that EF,p \= tpi(Jip2, then 
there exists also a path p' starting at ,s and of length at most c, such that EF,p' \= 
ipiiitjj2 - To see this, note that EF,p |= tpi\J'ijj2 implies that tpi\J-ip2 is satisfied in a finite 
path p" which is an initial segment of p. We can repeatedly shorten p" to obtain p' as 
follows. For any pair of strongly equivalent knowledge states s = p" and s' ~ p'J such 
that i < j, consider the sequence p", . . . ,p" of knowledge states between them. If ip2 
is satisfied by none of them, we can cut p"^.^ , . . . , p" and replace each state p-^i' Pi+2' 
... by an equivalent successor of p", p"^^ such that we obtain a (finite) path in EF. 
Otherwise, i.e., if EF,p'l \= ^2 for some I G {«,... we can cut p" immediately 
after the first such p". It is easily verified that the resulting path p' has length at most c 
and still satisfies ■!/'iUV'2- 

Now consider the case A('i/;iU'02)- Obviously, if ipi(Jip2 is satisfied by all finite 
paths of length c starting at s, it will also be satisfied by all paths of arbitrary length. 
To see the converse direction, assume there is an infinite path p starting at s such that 
EF,p ^ ipi\Jip2- We show that then a finite path p' of length at most c starting at s 
exists such that EF,p' ^ ipi\Jip2- Observe that either (i) ip2 is false in every pi, i > 0, 
or (ii) there exists some i > such that EF.pi \= A^V-'2> and EF, pj |= ipiA^ip2, 
for every j G {0, . . . , i — 1}. In case (i), we can, as above, transform the initial segment 
p" = Po , pi Pc- 1 of p by repeatedly removing sequences between pairs of strongly 
equivalent knowledge states and eventually obtain a path p' as claimed. In case (ii), we 
start with p" = po , pi , . . . , Pi and again repeatedly remove sequences between pairs of 
strongly equivalent knowledge states to obtain a path p' of length at most c starting at 
s such that EF,p' ^ ^/jiUV'2- Hence, if all infinite pathsp starting at s satisfy V'iUi/'2. 
then so do all paths of length c starting at s. 

This proves that if there are at most c strongly inequivalent descendants of s, it 
suffices to consider paths of length c to prove whether EF, s \= (fi. 

Now an algorithm for deciding EF, S ^ 99 is as follows. Starting at s, it recursively 
checks the satisfiability of (p by checking the satisfiability of its subformulas and evalu- 
ating Boolean connectives. For any subformula ip' of form Etp (resp., A^), guess nonde- 
terministically, step by step, a path p in EF starting at s in order to witness EF,p \= ip 
(resp., refute EF,p \= ip and exploit Aip = ~E~i/;) and check this by iterating through 
p for (at most) c steps, using a counter. The counter occupies space log c in a standard 
binary coding. Per nesting level, the algorithm requires space for one counter and for 
one descendant of s, which is bounded by mg. Furthermore, due to the fact that EF is 
regular, ip G Bel{s) can be checked, for all s e Sef and atomic p, in space polyno- 
mial in .s, EF, and \\ip\\. Hence at each level, the algorithm runs in space A which is 
polynomial in TOs + logc+ \\EF\\ + \\ip\\. 

By applying Savitch's Theorem in the formulation for Turing machines with oracle 
access (cf. Theorem 2.27 in [6]), we can show by induction on the evolution quantifier 
depth g > of a formula p, that deciding EF , s \= p is feasible on a deterministic 
Turing machine M using space at most {q + 1)A^. Savitch's Theorem states that if 
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language A can be decided by a nondeterministic Turing machine with oracle set B in 
space f{n), then it can be decided by a deterministic Turing machine with oracle set B 
in space f{n)'^, providing f{n) > log n. Furthermore, /(n) must be space constructible 
(which is the case in our application of the lemma). 

Induction Base (q = 0). Since the above algorithm operates deterministically in 
space A < A?, the existence of M is obvious. 

Induction Step {q > 0). Assume that formulas of evolution quantifier depth < g - 1 
can be decided in deterministic space q ■ A"^ on some Turing machine M' , and let ip have 
evolution quantifier depth q. If ip is of form Eip (resp., A?/;), then the above algorithm 
amounts to a nondeterministic oracle Turing machine M' using work space bounded by 
A and calhng an oracle for deciding subformulas of form Etp' (resp., kij)'). By Savitch's 
Theorem, there is a deterministic Turing machine M" using work space at most A"^ 
which is equivalent to M' and uses the same oracle set. By the induction hypothesis, 
the oracle queries can be deterministically decided in space q- A^. Hence, from M" we 
can construct a deterministic Turing machine M deciding EF, s \= ip which operates 
in work space + q ■ = (g + 1)A?. This M is easily extended to decide all (/? of 
evolution quantifier depth q within the same space bound. This concludes the induction 
and the proof of the lemma. □ 

We then obtain the following complexity results. 

Theorem 8. Deciding EF, s\= ip, given a regular propositional evolution frame EF = 
{A, EC, AC, n, p, Bel), a knowledge state s, and a formula (p is 

1. 2-EXPSPACE-compfefe, if Bel{-) is k-local for some k which is polynomial in 
\\EF\\, and comp ^p{-) is incremental; 

2. EXPSPACE-comp/eJe, if EF is c-bounded, where c is polynomial in \\EF\\, con- 
tracting, and functions 11 and p are computable in space polynomial in the size of 

cornpEp{-). 

3. PSPACE-complete, if EF is as in 2 and, moreover, all rules in the compilations 
comp pp{s') of descendants s' ofs are from a set Rq of size polynomial in \\EF\\. 

Proof. We first prove the upper bounds of these results. Recall that we assume a fi- 
nite propositional alphabet A. Hence, by Condition 3 of a regular evolution frame EF, 
there are only finitely many different belief sets Bel{s). Indeed, the number of rules of 
length L is bounded by (4|^|)^, and hence there are 0(211^^11'^ ) (single exponential 
in EF) many rules, where h is some constant, which are relevant for characterizing 

belief sets, and there are 0{2^ ), i.e., double exponentially many, different behef 
sets Bel{P). This imphes that \S/ =% \ < d where d = 0(22'"'''" ^ ^ 
S C Sef. Observe also that £C is finite and \£C\ = 0(2ll^^ll''), for some constant 
I2. This follows from the finiteness of A and the fact that rules in events, as well as 
events themselves, have size at most polynomial in In particular, there exist 

0(211^^11 2,1 ^ j^^jjy different rules in events, for some constant ^2,1, and thus there are 
0{2\\E^\\'^-'y\EP\\'^-^ = 0(2ll^^ll") many different events in £C, for some constants 
l2,2 and Z2- In the following, let S = dsc{s). 
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Membership, Part 1. In order to prove an upper bound for Part 1 of the theorem, since 
Bel{-) is A;-local, compEp{-) is incremental, and =%p has finite index with respect to 
S, which is successor closed. Theorem 3 can be applied, establishing that =ef has 
finite index with respect to S. Recall from the proof of Theorem 3 that an upper bound 
for \S/ =ef\ is given by d^l^*^! , where k is polynomial in H-BJ'II, i.e., k = \\EF\\'''^ for 
some constant l^. Furthermore, \EC\ = 0(211^^" ^), for constant Z2. Hence, we obtain 
that there are at most 

^(2e)(2ii^^ii'')ii^''ii'^) = ^o(2ii^^ii''+'^) = 0(22"^''"'') = 0(22"''''"') 

i.e., double exponentially many knowledge states s' £S which are pairwise not strongly 

II EF II ^ 

equivalent, for some constant in other words, \S/ =ef \ = 0(2 ). Furthermore, 
we can store a representative, s', of every class in S/ =ef by storing KB and at most 
double exponentially many events. Since every event can be stored in polynomial space, 
overall double exponential space is sufficient to store s'. By apphcation of Lemma 3, 
EF, s \= (fi can be verified in space polynomial in (g + 1) • (to^ + logc + + 

1 1 EF 11^0 

\\(p\\). We have shown above that TOs satisfies rus = 0(2^ ), for some constant /q. 
Furthermore, we have shown that the index of = ef with respect to S, c, satisfies c = 

0(22'"'''"'). Hence, logc = 0(211^^11''), for a constant I'. Consequentiy, EF,s \= ip 
can be verified in 2-EXPSPACE. 

Membership, Part 2. An upper bound for Part 2 of the theorem can be obtained as fol- 
lows. The fact that =%f finite index with respect to S imphes that =%f* finite 
index with respect to 5, too. And, as we have shown in the proof of Theorem 7, canon- 
ical c-equivalence implies strong canonical equivalence in a c-bounded, contracting 
evolution frame. Thus, ='^f has finite index with respect to S by Theorem 2. Further- 
more, according to Theorem 6, =^ is compatible with =ef- Hence, we may repre- 
sent Bel{s'), s' G S, by the canonical compilation com,p pp,{s'), together with the 
last c events in s', where c is polynomial in The polynomial size bound for 

rules in comppp{s') also holds for comppp,{s') and thus, since EF is contracting, 
II com,ppp, (.s') II is bounded by the number of different rules, which is 0(211^^11 ), for 
some constant /. Recalling the bound of 0(2^^°^'^^°^ |flo l+i) ) foj- the number of different 
canonical compilations from the proof of Theorem 7, we obtain that there are 

i.e., double exponential many different canonical compilations, where /' and I" are suit- 
able constants. Multiphed with the number of possibihties for the last c events, \£C\^, 
which is single exponential, as 

i£cr^ = o(2ii^^ii'='r = o(2ii^^ii'), 

for some constant h, we obtain again that there are at most double exponentially many 
knowledge states s' e 5 which are pairwise not strongly equivalent. However, since 
\\comppp»{s')\\ < |^|ll^^ll'' = 0(211^^11" ), for some constant /i', we can represent 
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every strongly inequivalent descendant s' G S of s, using comp^p, (s') together with 
the last c events in single exponential space. Thus, EXPSPACE membership follows 

from Lemma 3. 

Membership, Part 3. Next, we prove PSPACE membership for Part 3 of the theorem. 
The additional condition on comp^p {s') that all rules are from a set Rq of size polyno- 
mialin \\EF\\ guarantees that ||co?np^^.(s')|| is polynomial in the size of for any 
s' S S. Using the same estimate as above, we thus obtain at most single exponentially 
many different canonical compilations, for states s' . MultipUed with the exponential 
number of possibilities for the last c events, we now obtain at most single exponen- 
tially many strongly inequivalent descendants of s. For storing them, we use again 
comppp,{s') together with the last c events, requiring the space of \\comppp*{s')\\ 
plus c times the space of an event. Since || comppp, {s')\\, c, and the size of an event are 
all polynomial in the size of EF, overall polynomial space is needed for representation, 
establishing PSPACE membership in virtue of Lemma 3. 

Hardness. We show the lower bounds by encoding suitable Turing machine computa- 
tions, using padding techniques, into particular evolution frames. In order to obtain a 
lower bound for Part 1, consider a regular evolution frame EF, where A = {Ai \ 1 < 
i < n} U {accept}, hence, \A \ = n + 1, and Bel{P), defined below, is semantically 
given by a set of classical interpretations, where not is classical negation and repetition 
of literals in rule bodies is immaterial. Then, there exist 2"+^ classical interpretations 
yielding 2^" different belief sets Bq,. .. , B^2''^+\_^. We assume an enumeration of 
interpretations Iq,. . . ,/2n+i_i, such that Iq does not contain accept. Moreover, we 
consider a single event E = %. Let 1 = 2"^. The number of events, i, encountered 
for reaching a successor state s' of sqW i < I steps serves as an index of its beUef 
set, i.e., Bel{,s') = Bi. For i < I — \, Bi k obtained using interpretations Iq and Ij 
as models, such that the j-th bit, 1 < j < logZ = 2", of index i is 1. Thus, the be- 
Uef sets Bo, . . . , Bi-2 are pairwise distinct and under classical model-based semantics, 
accept ^ Bi holds for Q < i < I — 2. 

In state s;_i, we simulate in polynomial time the behavior of an 2-EXPSPACE 
Turing machine M on some fixed input I. To this end, we use an action a and an update 
policy 77, such that n{s,E) — a for \s\ ~ m, ■ I + I — 1, m > 0, if M accepts 
I, and n{s,E) = otherwise. For all other knowledge states, i.e., if |s| mod I ^ 
I — 1, n{s, E) = 0. The reaUzation assignment p{s, A) is incremental and adds an 
empty program, 0, if A = 0, and the program {accept ^ } in case of A = {a}. The 
semantics Bel{Pi, . . . , Pk) is as follows. If k mod I ^ I — 1, then Bel{Pi, . . . , Pk) = 
Bj, where J = k mod I. Otherwise, if Pk = {accept <— }, then Bel{P\, . . . , Pk) = B, 
where B is a fixed belief set containing accept, and, if Pk ^ {accept ^ }, then 
Bel{P\, . . . , Pk) = Bi-i, where -B(_i is defined as for i < I — 1, i.e., accept ^ 
-B; _ 1 . As easy to see, there are at most I + 1 states sq, - ■ ■ ,si which are not 0-equivalent, 
and 1-equivalence of two states s and s' implies strong equivalence of s and s'. To see 
the latter, observe that s =Ep s' iff |s| mod (/ + !) = \s'\ mod (/ + !). Thus, Bel{-) is 
local. Furthermore, it is easily verified that the functions 11 and p can be computed in 
polynomial time. The same is true for deciding r G Bel{P), P = (Pi, . . . , Pk), where 
we proceed as follows. We first compute j = k mod I. If j ^ I — 1, then we scan 
the bits 6i, &2, • • • , &iog j of j, and for every bit hji such that bji = 1, we compute its 
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index, j', in binary (which occupies at most n bits), and extend its representation to 
length n by adding leading zeros if necessary. The resulting binary string is regarded 
as representation of the interpretation Iji, where the bits encode the truth values of the 
atoms Ai,. . . ,An and accept is false. Hence, each model J of P can be computed 
in polynomial time; checking whether J |= r is easy. Thus, deciding r G Bel{P) is 
polynomial if j ^ / — 1. Otherwise, i.e., if j = I — 1, depending on P^, r € B (resp., 
r G -B;_i) can be similarly decided in polynomial time. 

Summarizing, Bj-i contains accept iff M accepts / iff EF, sq \= EFaccept. Note 
that the dual formula (/5 = AGaccept can be used if every Sq, • • • ,-Bi-2 contains accept 
(and -B;_i contains accept iff M accepts /). Furthermore, the membership tests E € £C 
and r € Bel{P), as well as the functions 77 and p, are computable in PSPACE (in fact, 
even in polynomial time), thus deciding TempEvo in EF is 2-EXPSPACE-hard. 

Let us now prove a lower bound for Part 2 of the theorem. Again, we consider a 
regular evolution frame EF over a finite alphabet A = {A^ 1 1 < i < n} U {accept^. 
Moreover, we consider the single event E — %. Let comp^p{-) be an incremental 
compilation function that compiles a knowledge state s,\s\ < 2", into a sequence of 
progriims, P = ({ro}, , • ■ • , {?'|s|-i})> consisting of \s\ programs each consisting of a 
single positive, non-tautological rule, such that all rules are pairwise distinct and do not 
contain accept. Furthermore, let the semantics Bel{-) be given by Bel{Po, , . . . , Pn) 
containing all rules which are true in the classical models of P„. Note that under these 
assumptions, all states of length less than 2" have mutually different belief sets, and 
compEpi-) = compfp{-). 

In state s, \s\ = 2", we simulate in polynomial time the behavior of an EXPSPACE 
Turing machine M on input /. To this end, 7T(7r2n-i(.s), E) returns A = {a}, where a 
is an action which causes accept to be included in the belief set iff M accepts /, 
otherwise i7(7r2n_i(.s), E) = 0. For all knowledge states s', such that |,s'| mod 2" 7^ 
0, i7(7r|^,|_i(s'),£^) = 9. Thus, M accepts / iff EF,sa ^ EFaccept. Since EF is 
contracting and 0-bounded, and since the membership tests E G £C and r £ Bel{ ), 
as well as the functions 77 and p are computable in PSPACE, it follows that deciding 
TempEvo in EF is EXPSPACE-hard. 

Finally, we give a proof for the lower bound of Part 3 of the theorem, by encoding 
the problem of evaluating a quantified Boolean formula (QBE), which is well known 
to be PSPACE-hard, in the EPI framework: Let ip = Qixi . . . QnXnOi be a QBF and 
let (fi = PQiXi, . . . PQnXnCt, where PQi — A if Qi = V and PQi = E if Qi = 3, 
1 < i < n, be its corresponding state formula. Consider the following evolution frame 
EF^Pi, where A = {xi, Q 1 1 < i < n} U {0, 1}, the initial knowledge base KB = 
{xi 1 1 < i < n} U {ci}, EC = {{0}, {1}}, and the update policy 7Tepi is given by the 
following actions: 

-ffEPi(s, E) = { assert(ci+i) | q G Bel{s), 1 <i <n - 1}U 
{ retract(ct) | q G Bel{s), 1 <i < n}U 
{ assert(-.Xj) j c, e Bel{s), Q&E,l<i< n}U 
{ retract(xj) j c, e Bel{s), S 1 < i < n}. 

Intuitively, a counter for events is implemented using atoms Ci, 1 < i < n, and each 
event, which may be or 1, assigns a truth value to the variable encoded by Uterals 
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over atoms Xi, 1 < i < n. Hence, TJepi creates a truth assignment in n steps. Thus, 
it is easily verified that EFep\, KB ^ ip if f tp is true. Note that after n steps, i.e., for 
all knowledge states \s\ > n, ilEPi(s, E) is always empty. This implies that EF ep\ is 
n-bounded. Moreover, 11 is factual, i.e., it consists only of facts (of update commands), 
yielding a contracting compilation function compEp^{■) which uses only facts over A. 
Thus, and since the membership tests E £ EC and r € BelE{-), as well as the functions 
iT and p are computable in PSPACE, it follows that TempEvo in Part 3 is PSPACE- 
hard. □ 

While, for the prepositional EPI framework, Bel{s) depends in general on all events 
in s, it is possible to restrict ACep\ to the commands assert and retract, by efficient 
coding techniques which store relevant history information in Bel{s), such that the 
compilation in compEP\{s) depends only on _BeZ(7r„_i(s)) and the last event E^ in s, 
as shown in [16]. Furthermore, the policy TTepi is sensible only to polynomially many 
rules in events, and compEP\ (s) contains only rules from a fixed set Rq of rules, whose 
size is polynomial in the representation size of EF. Thus, by Part 3 of Theorem 8, we 
get the following result. 

Corollary 3. Let EF = {A, £C, ^Cepi, -/7epIj Pepi, BcIe) be a propositional EPI evo- 
lution frame, let sbea knowledge state, and let (pbe a formula. Then, deciding EF, s \= 
if is PSPACE-complete. 

The encoding of the QBF evaluation problem in the proof of Part 3 of Theorem 8 
has further interesting properties. The initial knowledge base used, KB, is stratified 
and the resulting update pohcy is also stratified and factual as defined in [15, 16]. This 
means that r G BelsiP) can be decided in polynomial time for the given evolution 
frame. Since, moreover, the membership test E € £C, as well as the functions 77 and p 
are computable in polynomial time, we get another corollary. To this end, we introduce 
the following notion. 

Definition 15. Let EF = {A, EC, AC, 77, p, Bel) be a propositional evolution frame. 
EF is called strongly regular if the membership tests E ^ EC and r G Bel{P) are 
feasible in polynomial time, as well as 77 and p are computable in polynomial time. 

Now we can state the following result. 

Corollary 4. Deciding EF,s |= ip, given a strongly regular propositional evolution 
frame EF = {A, EC, AC, 77, p, Bel), a knowledge state s, and a formula ip, is PSPACE- 
complete, if EF is c-bounded, where c is polynomial in 1|7?F||, contracting, and all 
rules in the compilations compEpis') of descendants s' of s are from a set Rq of size 

polynomial in \ \ EF \ \ . 

Thus, concerning evolution frames according to Part 3 of Theorem 8, we stay within 
the same complexity class if we suppose strong regularity. For strongly regular evolu- 
tion frames according to Parts 1 and 2 of the theorem, we can estabUsh the following 

result. 

Theorem 9. Given a strongly regular propositional evolution frame, EF = {A, EC, 
AC, 77, p, Bel), a knowledge state s, and a formula ip, deciding EF, s\= ipis 
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1. 2-EXPnME-com/?Zefe, if Bel{-) is k-local for some k which is polynomial in 
\\EF\\, and camp ^p(-) is incremental; 

2. EXPS¥KCE-complete, if EF is c-bounded, where a is polynomial in \\EF\\, and 
contracting. 

Proof. We first prove 2-EXPTIME membership for Part 1 of the theorem. 

We do so by constructing a Kripke structure K' = {S', R', L') in double expo- 
nential time in ||£'F||, such that K',s |= <^ iff EF,s \= and S',R' are of size 
at most double exponential in the size of EF. This proves 2-EXPTIME membership 
by a well known result from model checking [11 J, stating that there is an algorithm 
for determining whether is true in state s of K' = {S' , R' , L'), running in time 
0(\(f \ ■ {\S'\ + l-R'D), where \ip\ denotes the evolution quantifier nesting depth of (p. 

The Kripke structure K' = (5", R', L') results from the Kripke structure K^p = 
{S, R, L), where E = S/ =ef, by restricting the labeling L to atomic subformulas of 
Lp. Let Aip denote the set of all atomic subformulas in (p. Then, S' = S, R' = R, and L' 
is the labeUng function assigning to every s G S" a label L'{s) = Bel{s)r\Aip. It is well 
known that K\s ^ f iff K^p, s \= (p, which in turn holds iff EF, s \= (p. Recall from 
the proof of Lemma 3 that in order to prove EF, ,s |= (p, paths need to be considered 
only up to length c, where c = | -El is the maximum number of strongly inequivalent 
descendants of s. Moreover, we can use one knowledge state as a representative for ev- 
ery equivalence class in E, thus c strongly inequivalent knowledge states are sufficient. 
Recall also from the proof of Part 1 of Theorem 8 that for the given evolution frame 
EF, c is double exponential in \\EF\\, and that there are at most single exponentially 
many different events, i.e., \£C\ = 0(2ll^^ll ). We construct K' using a branch and 
bound algorithm that proceeds as follows. 

The algorithm maintains a set O of open knowledge states, as well as the sets S', 
R', and L' of K'. Initially, O = {s}, S' = {s}, R' = 0, and L'{s) = Bel{s) n A^. 
For every knowledge state s € O, the algorithm removes s from O and generates all 
possible (immediate) successor states s' of s. For every such s', it is checked whether 
it is strongly inequivalent to every s G S*. If so, s' is added to O and S, the tuple (s, s') 
is added to R, and L'{s') = Bel{s') n A^p is computed. Otherwise, if s' is strongly 
equivalent to a knowledge sate s" € S', then the tuple (s', s") is added to R'. The 
algorithm proceeds until O is empty. 

Since there are at most c strongly inequivalent descendants of s, the algorithm puts 
into O at most c, i.e., double exponentially many knowledge states, each of which has 
size at most double exponential in ||-E'-F'||. Furthermore, since there exist at most single 
exponentially many different events, in every expansion of a node in O, at most expo- 
nentially many successors are generated, each in polynomial time. Since Bel{-) is poly- 
nomial and fc-local, we can detect s =Ep s' in single exponential time by comparing the 
trees T(s) and T(s') up to depth k, respectively. On levels 0, 1, . . . , fc, T(,s) and T(s') 

contain \£C\^'' = 0(2ll^^ll')2fc = 0(2ll^^ll'') many nodes each, where T is some con- 
stant. For each pair si and s[ of corresponding nodes in T(s) and T{s'), we must check 
whether Bel{si) = Bel{s[) holds. Condition 3 of a regular evolution frame EF im- 
pUes that single exponentially many tests r G Bel{comp{si)) iff r € Bel{comp{s[)) 
(for all rules r of length polynomial in are sufficient. Strong regularity implies 
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that deciding r € Bel{si) = Bel{comp{si)) and r € Bel{s[) = Bel{comp{s[)) are 
polynomial. Hence, deciding Bel{s\) = Bel{s[) is feasible in single exponential time 

in \\EF\\. 

Summing up, testing for (at most) double exponentially many knowledge states s 
times single exponentially many successor states s' whether s =ef s' can be done in 

0(22"^^"'^ .211^^11'=^. 211^^11'^) = 0(22""""') 

time, for constants hjhjh and I. Thus, the overall algorithm proceeds in double ex- 
ponential time, i.e., K' can be computed in in double exponential time. This proves 
2-EXPTIME membership of EF,.s\= ip. 

Hardness follows from a suitable encoding of 2-EXPTIME Turing machines M. To 
this end, a similar construction as in the hardness proof of Part 1 of Theorem 8 can 
be used, where the update policy n{s, E) simulates a 2-EXPTIME Turing machine 
rather than a 2-EXPSPACE Turing machine; note that the components of EF there 
have polynomial time complexity. 

We prove Part 2 of the theorem by showing that the lower bound does not decrease when 
demanding strong regularity. To this end, we encode the computations of an EXPSPACE 
Turing machine, M, into a strongly regular evolution frame EF, such that EF is c- 
bounded, where c is polynomial in and contracting. 

Assume that M has binary tape alphabet {0, 1} and runs in space 2', where I is 
polynomial in ||. Let us consider the following strongly regular evolution frame 
EF, where ^ = {A^ 1 1 < i < /} U {P^ 1 1 < i < /} U {Qi 1 1 < i < m} U {Qaccept], 
hence, |.4 1 = 2/ -|- m -|- 1 = fc. Then, there exist 2*^ classical models, which we use 
to represent the configuration of M as follows. Atoms Qi, 1 < i < m, and Qaccept 
encode the state of M. Literals over atoms Ai and Pi, 1 < i < I, are used to represent 
an index of M's tape in binary format. We use a "disjunctive" semantics as follows. 
Observe that we could use conjunctions of literals over atoms Qi and Pi to encode the 
current state of M and the position of M's head, and conjunctions of hterals over atoms 
Ai to encode the fact that the tape cell at the encoded index contains 1. By building the 
disjunction of a set of such conjunctions, we get a formula in disjunctive normal form 
(DNF) describing by its models the current configuration of M. We can make use of this 
observation by stipulating that we use rules to describe anti-models, i.e., interpretations 
which are not models of the current knowledge base KB. By defining Bel(-), taking the 
negation of the conjunction of all rules, we get a DNF, describing the models of KB, as 
intended, and r G Bel{KB) can be computed in polynomial time (by checking whether 
r is entailed by every disjunct), as required. Furthermore, the semantics for sequences of 
programs Bel (Pi , . . . , P„ ) is defined by the semantics of their union Pei (Pi U • • • UP„ ) . 

We simulate in polynomial time the behavior of the EXPSPACE Turing machine 
M on input / as follows. Without loss of generality, we assume that the leftmost cell of 
M's tape (the cell at index 0) is always 1, that M initially is in state Qq and its head is 
in Position 0, and that M uses the first steps to write / to the tape (without accepting). 
Hence, the initial configuration can be represented by the single disjunct: 

Qi a -^Q2 a ... a -.Qto A -^Qaccept A -iPi A ... A -.P; A -.Ai A ... A -i^;. 
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Table 1. Complexity results for regular and strongly regular evolution frames. 



cvolulion IVanic EF 


regular 


strongly rcgLilar 


(1) : A;-local & incremental 

(2) : c-bounded & contracting 

(3) : (2) & |Jto| polynomial 


2-EXPSPACE-complete 
EXPSPACE-complete 
PSPACE-complete 


2-EXPTIME-complete 
EXPSPACE-complete 
PSPACE-complete 



Thus, the initial knowledge base KB consists of the single constraint: 

^ Ql, ~^Q2, ■ ■ ■ , ~^Qm,^Q accept 1 • • • j • • • , 

We use a single event £" = as the tick of the clock and let -/7(.s, E) implement M's 
transition function. That is, n{s,E) is a set A of actions insert{r) and delete{r'), 
where r and r'are constraints over A. Furthermore, we use p± (see Section 3.2) for 
adding (resp., removing) the constraints to (resp., from) the knowledge base KB, which 
amounts to the addition (resp., removal) of corresponding disjuncts to (resp., from) the 
DNF representing the current configuration of M. Since for every transition of M at 
most \KB\ + 1 rules need to be inserted and at most \KB\ rules need to be removed, 
n and p± are polynomial in the representation size of the belief set. Moreover, M 
accepts I iff EF,KB \= EFQ accept- Since EF is contracting and 0-bounded, and 
since the membership tests E E £C and r G Bel{-), as well as the functions 77 and 
p are computable in time polynomial in the size of EF, deciding TempEvo in EF is 
EXPSPACE-hard. □ 

The complexity results obtained so far are summarized in Table 1 . Further results 
can be derived by imposing additional meaningful constraints on the problem instances. 
We remark that if we restrict the semantics for Bel{-) to be defined in terms of a unique 
model (e.g., the extended well-founded semantics for ELPs [9, 5]), then in case of a 
c-bounded and contracting regular evolution frame EF, the complexity of deciding 
TempEvo drops from EXPSPACE to PSPACE. This can be argued by the observation 
that, in case of a unique model semantics, we have only single exponentially many 
different belief sets, and a knowledge state s can be represented by storing the (unique) 
model of comp{s) and the last c events, which is possible in polynomial space. On the 
other hand, already for 0-bounded, contracting, strongly regular evolution frames with 
polynomial-size rule set 7?o, the problem TempEvo is PSPACE-hard, as can be shown 
by adapting the construction in the proof of Part 3 in Theorem 3 to, e.g., evolution 
frames based on stratified or well-founded semantics for ELPs [9, 5]. 

7.1 Complexity of state equivalence 

We conclude our complexity analysis with results concerning weak, strong, and k- 
equivalence of two finite propositional update programs under Belsi') ™d Bel^{-), 
respectively. 
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We can state our first result, concerning the complexity of deciding weak equiva- 
lence under Belsi-), ^ consequence of Lemma 2 (cf. Section 6.1). 

Theorem 10. Deciding whether two given finite propositional update programs P and 
Q are weakly equivalent under Bels, i-e., satisfying BelsiP) — BelsiQ), coNP- 

complete. 

Proof. Membership follows from Lemma 2: The problem of checking BelE{P) = 
Bel E (6) for finite propositional update programs P and Q is equivalent to the task of 
checking whether they yield the same answer sets, i.e., whether U{P) = U{Q), which 
is in coNP. 

For the lower bound, suppose that, without loss of generality, P has no answer set. 
Then checking whether BelsiP) — BelsiQ), ™ update sequence Q, amounts to 
the task of testing whether Q has no answer set, which is coNP-complete (cf. [12]). □ 

For deciding 1-equivalence, the following lennma is useful: 

Lemma 4. Let P and Q be finite propositional update programs over possibly infinite 
alphabets. Then, P andQ are not 1 -equivalent under BelE{-) iff there is an ELP P and 
a set S such that (/) S G U{P + P) but S ^ U{Q + P), or vice versa, (ii) \S\ is at most 
the number of different literals in P + Q plus 1, and (Hi) \P\ < \S\ + 1. {Note that P 
has polynomial size in the size ofP and Q.) 

Proof. Intuitively, this holds since any answer set 5 of P + P can be generated by at 
most \S\ many rules. Furthermore, if S is not an answer set oiQ + P, by unfolding 
rules in P we may disregard for an S all but at most one literal which does not occur 
in P or Q. To generate a violation of in g + P, an extra rule might be needed; this 
means that a P with |P| < [^l + 1 is sufficient. 

If part. Let P and Q be finite propositional update programs and S a set such that Con- 
ditions (i), (ii), and (iii) hold. Then, P and Q are not 1-equivalent, since, by Lennma 2, 
BelE{P + P) i- BelsiQ + P) foUows from (i). 

Only-if part. Let P and Q be finite propositional update programs which are not 1- 
equivalent, i.e., there exists an ELP P such that BelsiP + P) BelsiQ + P)- More- 
over, again by application of Lennma 2, there exists a set S such that, without loss of 
generahty, S € U{P + P) but S ^ U{Q + P), i.e., Condition (i) holds. 

By means of P and S, we construct a program P' and a set S' such that Condi- 
tions (i), (ii), and (iii) hold for P' and 5': Consider the program 77i = {{P U P) \ 
Rej{S,P + P))^ ■ Then, according to the update answer set semantics, S can be gen- 
erated from the rules in IIi by means of constructing its least fixed-point. Moreover, 
this still holds for the following simpUfication Pq of P^. First, all rules which are not 
applied when constructing S can be removed. Second, among the remaining rules, we 
delete all rules with equal heads, except one of them, namely the rule which is apphed 
first in the least fixed-point construction of 5. (If several rules with equal head are ap- 
plied at this level of the fixed-point construction, then we keep an arbitrary of them.) 
Thus, P(f consists of k positive rules, n, . . . , r^, with k different heads, Li, , . . . , L/., 
which are exactly those Uterals derived by Pq. Hence, \Pq\ <\S\. 
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We will create the program P' from Pq by employing unfolding. This means that 
some of the literals Li, 1 < i < k, will be eUminated by replacing every rule r G Pq 
such that Li G B{r) by a rule r' such that H{r') = H{r) and B{r') = {B{r) \ 
{Li}) U B{ri), where is the (single) rule having H{ri) = Li. Consider the program 
7T2 = (e U P \ Rej{S, Q + P))^. Since S is not in 1{{Q + P), it has a least fixed-point 
different from S. There are two scenarios: 

1. Some literal Li <E S cannot be derived in 772. Let S' = {L G S \ L occurs in 
P + Q} U {Li}, and construct the program P' from Pq by unfolding, eliminating 
all literals L ^ S'. 

2. All literals Li ^ S can be derived, as well as some literal Lk+i ^ S is derived by 
a rule r e P^ \ P^ . Let S' = {L e S \ L occurs mP + Q}U {Lk+i}, and build 
P' from Pq by adding the rule rk+i ■ Lt+i <— B{r) and eliminating all literals 
L ^ S' from the resulting program by unfolding. 

Then, in both cases, S' is not a least fixed-point of {{Q U P') \ Rej{S', Q + P'))''^' , 
while it is aleast fixed-point of ((i'UP')\7Zej(S",P+P'))'^'. This proves Condition (i). 
Furthermore, is at most the number of different literals in plus 1, and |Po^| < 
l^l implies \P'\ < \S'\ + 1. Hence, Conditions (ii) and (iii) hold. □ 

Theorem 11. Deciding strong equivalence (or k-equivalence,for a given k > 0) of two 
given finite propositional update programs P and Q over possibly infinite alphabets, is 
coNP-complete under Belsi-)- 

Proof. For fc = 0, the result is given by Theorem 10. Since, according to Theorem 4, 
1-equivalence implies fc-equivalence for all A; > 1 under Belsi-), it remains to show 
coNP-completeness for /c = 1. 

Membership follows from Lemma 4: For deciding whether P and Q are not 1- 
equivalent, we guess a set 5* and a program P according to Conditions (ii) and (iii) 
of Lemma 4. Then we check in time polynomial in the size of P + Q whether P and Q 
are not 1-equivalent. Hence, this problem is in NP. Consequently, checking whether P 
and Q are 1-equivalent is in coNP. 

For showing coNP-hardness, for k = 1, we give a reduction from the problem 
of tautology checking. Consider a formula F = Vi!li(-^»i ^ ^ ^is) ^^^^ atoms 
Ai,. . . , An, and two programs P and Q over an alphabet A 3 {Ai, . . . , An, T} as 
follows: 

P = {^Ai ^ not Ai, Ai ^ not -^Ai | i = 1, . . . , n} U 

{T ^ Lji,Lj2, Lj3 I j = 1, . . . , to}; 
Q = {^Ai <— not Ai, Ai ^ not -^Ai \ i = 1, . . . ,n} U 

Clearly, P and Q can be constructed in polynomial time. We show that F is a tautology 
if and only if P and Q are 1-step equivalent. 

If part. Suppose F is not a tautology. Then, there is a truth assignment cr to Ai , . . . , An 
such that F is false, i.e., Ln A Ln A Ljs is false for 1 < i < to. Let 7? be the program 
consisting of facts Ai for every atom Ai, 1 < i < n, which is true in a. It is easily 
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verified that the set S = {Ai \ Ai e R} \J {-•Aj \ Aj R} is the only update 
answer set oi P + R, while S' = SU {T} is the only update answer set of Q + R. Thus, 
P and Q are not l-equivalent. 

Only-if part. Suppose F is a tautology. Towards a contradiction, assume that P and Q 
are not l-equivalent. Then, by virtue of Lemma 2, there is a (consistent) program R and 
some set S such that either S G U{P + R) wA S ^ U{Q + R), or S ^ U{P + R) 
and S € U{Q + R) holds. Observe that, for any set 5* and every program R, the 
sets Rej{S, P + R) and Rej{S, Q + R) do not differ with respect to rules in P n Q. 
Furthermore, P^ and do not differ with respect to to rules in (P n Q)^. 

We first show that IS" n {Ai, -^Ai}\ = 1 holds, for 1 < i < n. Indeed, since S 
is consistent, {Ai, ^Ai} C S cannot hold for any 1 < z < n. On the other hand, 
suppose that neither Ai e S, nor -lAi e S holds for some 1 < i < n. Then, S 
entails the rules -^Ai ^ not Ai and Ai ^ not ^Ai of P Ci Q, which also cannot be 
rejected (since neither A^ € S nor ^Ai £ S). Thus, both ^Ai <— and Ai <— are in 
((P U P) \ Rej{S, P + P))^ as well as in ((Q U P) \ Rej{S, Q + P))^. However, this 
contradicts the assumption that 5 is a consistent answer set of either P + P or Q + P. 
This proves 15 n {Ai, -^Ai}\ = 1, for 1 < i < n. 

Assume first that -iT e S. Then, every rule r of P such that H{r) = T and 
S 1= B{r) are in Rej{S, P+R), and T ^ is in Rej{S, Q+R). Since 5* is an answer set 
of either P+P or Q+P, it is either the least set of literals closed under the rules of Pi = 
((P U P) \ Rej{S, P + R))^ or under the rules of Qi = ((Q U P) \ Rej{S, Q + P))^. 
Since P and Q coincide on all rules with head different from T, it follows that S must 
be the least set of literals closed under the rules of Pi as well as of Qi. Thus, S is an 
answer set of both P + R and Q + R, which is a contradiction. Hence, -iT ^ S holds. 

It is now easy to show that T e S must hold. Indeed, if 5 £ U{P + R), then, 
since P is a tautology, S \= B{r) for some rule r G P such that H{r) = T. Moreover, 
r ^ Rej{S, P + R) since -iT ^ 5, which in turn means T G S. If, on the other hand, 
S is an answer set ofQ + R, then T <— ^ Rej{S, Q + R) holds, and thus T G S must 
hold. 

Now suppose that S G U{P + R). Since P is a tautology, S \= B{r) for some rule 
r G P such that H{r) = T. Since ^ S, it follows that T e S. Since T ^ is 
in Q, and P and Q coincide on all rules except those with head T, it follows that S is 
the least set of hterals closed under the rules of ((Q U P) \ Rej{S, Q + R))^). Thus, 
S G U{Q + R), which is a contradiction. On the other hand, suppose S ^ U{Q + R) 
first. Since -iT ^ S, we have T G S, and thus clearly S must be the least set of hterals 
closed under the rules of ((P U P) \ Rej{S, P + R))^). Hence, S G U{P + R), which 
is again a contradiction. 

Hence, a program P and a set S as hypothesized cannot exist. This shows that P 
and Q are l-equivalent. 

We have shown that for every fc > 0, deciding fc-equivalence of finite proposi- 
tional update sequences P and Q is coNP-complete under the Bel b (•) semantics, which 
proves our result. □ 

In [25] it is shown that two dynamic logic programs, P and Q, are not ^-equivalent, 
for fc > 0, iff there exists a GLP P such that V{P + P) ^ V{Q + P). This result. 
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together with a corresponding version of Lemma 2 and complexity results for dynamic 
logic programming from [25], can be used to obtain the following analogous result. 

Proposition 2. Deciding weak, strong, or k-equivalence, for a given k > 0, of two 
given finite prepositional dynamic logic programs P and Q, is coNP-complete under 
Bel^i-). 

8 Related Work and Conclusion 

Our work on evolving nonmonotonic knowledge bases is related to several works in the 
literature on different issues. 

Clearly, our formaUzation of reasoning from evolution frames is closely related to 
model checking of CTL formulas [11], and so are our complexity results. The major 
difference is, however, that in Kripke structures the models are given implicitly by its 
labels. Nevertheless, since the semantics of evolution frames can be captured by Kripke 
structures, it is suggestive to transform reasoning problems on them into model check- 
ing problems. However, in current model checking systems (e.g., the Symbolic Model 
Verifier (SMV) [29], or its new version NuSMV [10]), state transitions must be speci- 
fied in a polynomial-time language, but descriptions of these Kripke structures would 
require exponential space even for evolution frames with PSPACE complexity (e.g., 
EPI evolution frames). Thus, extensions of model checking systems would be needed 
for fruitful usabiUty. 

Our filtration results for identifying fmitary characterizations, which are based on 
various notions of equivalence between knowledge states, are somewhat related to re- 
sults in [30, 26], obtained independently of our work and of each other. While we were 
concerned with the equivalence of sequences of ELPs (including the case of single 
ELPs), one can define two logic programs, P\ and P2, to be equivalent (i.e., weakly 
equivalent in our terminology), if they yield the same answer sets. They are called 
strongly equivalent, similar in spirit to 1-equivalence in our terminology, iff, for any 
logic program P, programs Pi U P and P2 U P have the same answer sets. Pearce et 
al. [30] investigated efficient (i.e., linear-time computable) encodings of nested logic 
programs, a proper generalization of disjunctive logic programs, into QBFs. In accor- 
dance with our results, they found that deciding whether two propositional nested logic 
programs are strongly equivalent is coNP-complete. In [26], the same result has been 
shown, but merely for disjunctive logic programs. 

Lobo et al. introduced the VDC [22] language for policies, which contain event- 
condition-action rules, serving for modeling reactive behavior on observations from 
an environment. While similar in spirit, their model is different, and [22] focuses on 
detecting action conflicts (which, in our framework, is not an issue). In [23], reason- 
ing tasks are considered which center around actions. Further related research is on 
planning, where certain reachability problems are PSPACE-complete (cf. [7]). Similar 
results were obtained in [33] for related agent design problems. However, in all these 
works, the problems considered are ad hoc, and no reasoning language is considered. 

Fagin et al.'s [18] important work on knowledge in multi-agent systems addresses 
evolving knowledge, but mainly at an axiomatic level. Wooldridge's [32] logic for rea- 
soning about multi-agent systems embeds CTL* and has beUef, desire and intention 
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modalities. The underlying model is very broad, and aims at agent communication and 
cooperation. It remains to see how our particular framework fits into these approaches. 

Leite [25] introduces in his Ph.D. thesis a language, KABUL, which is inspired 
by our EPI language, but goes beyond it, since this language foresees also possible 
updates to the update policy. That is, the function 77 may change over time, depending 
on external events. This is not modeled by our evolution frames, in which il is the 
same at every instance of time. However, a generaUzation towards a time-dependent 
update policy — and possibly other time-dependent components of an evolution frame — 
seems not difficult to accomplish. Furthermore, Leite' s work does not include a formal 
language for expressing properties of evolving knowledge bases like ours, and also does 
not address complexity issues of the framework. 

8.1 Further work 

In this paper, we have presented a general framework for modeling knowledge bases 
built over (extended) logic programs, for which we have then defined a formal lan- 
guage, EKBL, for stating and evaluating properties of a nonmonotonic knowledge base 
which evolves over time. As we have shown, this framework, which results from an ab- 
straction of previous work on update languages for normionotonic logic programs [15, 
16], can be used to abstractly model several approaches for updating logic programs in 
the literature. Knowledge about properties of the framework may thus be helpful to infer 
properties of these and other update approaches, and in particular about their computa- 
tional properties. In this Une, we have studied semantic properties of the framework, and 
we have identified several classes of evolution frames for which reasoning about evolv- 
ing knowledge bases in the language EKBL is decidable. In the course of this, we have 
established that reasoning about propositional evolving knowledge bases maintained by 
EPI update pohcies under the answer set semantics [15, 16] is PSPACE-complete. 

While we have tackled several issues in this paper, other issues remain for further 
work. One issue is to identify further meaningful semantic constraints on evolution 
frames or their components, and investigate the semantic and computational properties 
of the resultant evolution frames. For example, iterativity of the compilation comp ^p, 
i.e., where the events are incorporated one at a time, or properties of the beUef operator 
Bel, would be interesting to explore. 

Another interesting topic, and actually related to this, is finding fragments of lower 
comlexity and, in particular, of polynomial-time complexity. Furthermore, the inves- 
tigation of special event classes, e.g., event patterns, which exhibit regularities in se- 
quences of events, is an interesting issue. 
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